Rank: Member
Joined: 1/10/2005(UTC)
Posts: 714
Thanks: 14 times
Was thanked: 1 time(s) in 1 post(s)
|
When my customer service takes an order over the phone, they go to "New Order". They create "New" account by clicking on the new button and filling out the username, email, first and last name. They fill out the rest of the info and place the order. An email gets sent to the customer with thier order status, and an email gets sent out with their account info (username). Everything is great, except this: how does the customer know the password that was auto generated for them when creating the account?
In the email that gets sent out with thier account info, I do send their username (email), but i cant get it to send their password too. I've tried [[User.Password]] but it shows this error when i try to send the email through Orders > View > Email Template.
Error:
"This Email Template Could Not Replace All Tags. E-mail Will Not Be Sent."
I've also tried sending the "forgot password template" and i get the same error.
Whats the easiest way to give the customer their password for orders that were placed through the admin? I realize the customer can go to the login page and click forgot password so they get emailed a new one, but that seems like a lot of work. I want to give them all their info when they place the order so they can easily track it online ASAP.
|
|
|
|
|
|
Rank: Member
Joined: 1/10/2005(UTC)
Posts: 714
Thanks: 14 times
Was thanked: 1 time(s) in 1 post(s)
|
BUMP...
We are seing a huge influx of customers placing their orders over the phone, and then having to call back to get their password. They should have all their info so they can track online without calling us, or could this be a PCI complaince issue?
If its a security issue, we would then need 2 email templates, one for orders that are placed through the website, and one for orders placed through the admin.
The template through the admin should have some verbiage stating the csutomer needs to "reset" their password before tracking their order (we wouldnt want to say this for customer that placed their order online because they know, and created their own password and do not need to reset it).
|
|
|
|
|
|
Rank: Member
Joined: 11/5/2003(UTC)
Posts: 1,786
|
The customer can use the "Forgot Password" link to request a new password sent to their email. PCI rules require us to use hashed password which aren't recoverable to print in email messages. Only newly generated ones can be sent.
|
|
|
|
|
|
Rank: Member
Joined: 1/10/2005(UTC)
Posts: 714
Thanks: 14 times
Was thanked: 1 time(s) in 1 post(s)
|
Ok,
How hard would it be to create a different email template for admin orders vs website orders? I dont want customer's to get confused when I have to tell them they have to use the forgot password to receive their password when they place their order over the phone.
|
|
|
|
|
|
Rank: Member
Joined: 4/10/2009(UTC)
Posts: 120
Location: Mechanicsville, VA
Thanks: 3 times
Was thanked: 1 time(s) in 1 post(s)
|
You could manually the customer password and then use a special template that sends out the same new password, or the same format. Something like, "We created an account for you. Your username is your first initial and last name, and your password is your lastname followed by 123. Please change your password as soon as possible."
Maybe? Just a thought. |
Tim
|
|
|
|
|
|
Rank: Member
Joined: 12/23/2003(UTC)
Posts: 909
|
how about a verification email where the link contains a "key".
The link takes them to the "Create a Password" (forgot password) page. The current password is autofilled based on the "key". (Hidden text as well)
user types new password in and submits.
No "key", no entry. Possibly give the "key" a 1 hour life cycle.
Might be dreaming a little bit there though...lol... |
|
|
|
|
|
|
Rank: Member
Joined: 1/10/2005(UTC)
Posts: 714
Thanks: 14 times
Was thanked: 1 time(s) in 1 post(s)
|
Originally Posted by: "TimT" 
You could manually the customer password and then use a special template that sends out the same new password, or the same format. Something like, "We created an account for you. Your username is your first initial and last name, and your password is your lastname followed by 123. Please change your password as soon as possible."
Maybe? Just a thought.
I dont know if thats a security issue with having a generic number at the end of the last name. I think if someone figured out how we name passwords intially it could be a problem... plus hopefully no one has the same last name lol. These are all good ideas though for a temporary fix to a permanant solution. I like Matt's as well, which could be in a future release. I could also send out a username reminder email with my order workflow. I could provide instructions for passwords in that email instead of putting all this info in the order confirmation email. One section for Phone Orders, one section for Website Orders. That should clear up any confusion and not have to create multiple templates.
|
|
|
|
|
|
Forum Jump
You cannot post new topics in this forum.
You cannot reply to topics in this forum.
You cannot delete your posts in this forum.
You cannot edit your posts in this forum.
You cannot create polls in this forum.
You cannot vote in polls in this forum.