Password Reset But Not Accepted

I am running Litecart 2.0.2. I went to the Add-ons area of this site and downloaded Password Reset Tool, Version 2.0 | Uploaded 18 Apr 2017. Then I did the following:

1. Installed password reset tool
2. Went to the password reset URL
3. Entered the username and new password and clicked save. Did not get a "password saved" message. I do not know if this indicates an error or if it is normal behavior.
4. Enter credentials at litecart log-in screen and click log-in. The the  spinning colors appear for one second, then the login window reappears. I can click the log-in button repeatedly - it does not even invoke the unsuccessful log-in attempt counter.

I used phpmyadmin to looked at the Litecart users table. I can see the (encrypted) value for the password was changed when I used the password reset tool. 

How do I proceed to get into the Admin Panel of my site? Thanks in advance for any ideas on this.

You did something wrong. Try again. Also make sure /admin/.htaccess is updated.

There should be a note that password was reset and that the tool deleted itself.

Would upgrading from Litecart 2.0.2 to 2.2.2 resolve the problem?

[quote]Also make sure /admin/.htaccess is updated.[/quote]

Here are the search results of htaccess files on the server. None have today's date and none are in an admin directory.

[img]http://www.clemke.com/misc/litecart_htacccess.gif[/img]

Try attaching your posted images rather than linking to them. Your server does not allow hotlinking.

I recommend 2.2.2 although it would not solve your issue.
These files are not only LiteCart. Are you running more than one platform in the same directory?

[quote]make sure /admin/.htaccess is updated.[/quote]

How do I verify .htaccess is updated? What indicates it has been updated?

It's no longer the same value as it was before you updated with a new password.

OK, thanks. I have found the first log-in is not the problem, it is the second one where I am logging into LiteCart where a valid password is rejected. If I persist, it might then let me in multiple attempts and 15 minute locked out sessions. Are their recommended browsers or conflicts with browser extensions that might be at play here?

I did a fresh installation of LiteCart 2.2.2 via Softaculous and had the same issue, I could not log in. I tried a fresh installation a second time and again could not log in. That's why I wonder if the browser matters, or even some potential setting on my web host.

FIXED: The solution below worked for me. It was provided by my web host support team. I am posting it here on the chance it might be useful to someone else who is experiencing log-in/password problems.

[quote]Please use (the web host) Control Panel to install an SSL certificate on your domain, then make sure to use HTTPS and not HTTP.[/quote]

Once I created an SSL certificate for my website and logged in to the https URL for my LiteCart installation, the log-in/password issues were eliminated. Using HTTPS also solved another problem I was having. When I tried to upload images to LiteCart, I was getting the LiteCart log-in box, and it would not accept my password. Using the HTTPS url allowed the images to upload.

To make sure your site always rolls on HTTPS.
Uncomment the following lines in the root /.htaccess

  #RewriteCond %{HTTPS} off
  #RewriteCond %{REQUEST_METHOD} !=POST
  #RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [R=301,L]```

Like this:

```  # Force HTTPS (Standard SSL)
  RewriteCond %{HTTPS} off
  RewriteCond %{REQUEST_METHOD} !=POST
  RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [R=301,L]```

Thanks for the .htaccess advice.