diff --git a/services/nginx/app/classes/authentication.php b/services/nginx/app/classes/authentication.php index f0f9f216..0eebf25c 100644 --- a/services/nginx/app/classes/authentication.php +++ b/services/nginx/app/classes/authentication.php @@ -26,14 +26,8 @@ class authentication implements authentication_i } // Check if the customer has a password if (!$customer->hasPassword()) { - // Make sure the customer group is 0, to prevent higher privilege users from accessing the system through the default password. - if ((int)$customer->group_id->value() !== 0) { - return false; - } - // Does have a customer number, set the password to the last 4 digits of the customer number - if (!empty($customer->customer_number->value()) && strlen($customer->customer_number->value()) > 4) { - $customer->setPassword(substr($customer->customer_number->value(), -4)); - } + // If the customer doesn't have a password, we can't authenticate them, so we return false + return false; } // Check if the password is correct if (!$this->match_passwords($password, $customer->getPassword())) {