Session TimeOut during checkout

[DrByte]

Originally Posted by w2e

i have decided to move to godaddy. mochahost sucks anyway. all their chat people know is "email support" and all their email support knows is buy this and buy that.

Out of the frying pan and into the fire !!

[w2e]

Finally my site is up and running. Most importantly it can accept payments! The site is practically down for 10+ days with estimated sales loss at about $5K.

The lesson I learned is not php programming, but: choosing the right hosting company. I'd like to share the experience so you don't get held hostage by the hosting companies or lose money because of them.

I searched for the ratings of hosting companies before I made the decisions and still got burnt badly. I saw good words about godaddy on this forum and still end up getting held hostage. I guess the ratings and comments are more trustworthy if they are the results of comparison. Of course everybody's needs are different. If you are an expert and dont need much tech support, you probably want the server performance.

So far I have had experience with 6 hosting companies. I have tried zen cart with 4 of them. The only company I will recommend is Hostagor. People who would recommend the other 3 probably have not tried Hostgator. There is no comparison.

for similar cost of about $100/year, I rate them like this (9 the best, 0 the worst)
Server performance, load speed, etc:

godaddy: 1 (maybe if you spend more money you be faster. i dont know. I use the medium plan - the one in the middle.)
startlogic: 2
mochahost: 5
hostgator: 8 (maybe there are faster one, so i rate them 8)

tech support:
godaddy: 3
mochahost: 0 (they probably get paid $5 an hour)
startlogic: 5 (they are ok, except for the long wait for chat)
hostgator: 9

I left mochahost because I cannot get my problem solved and got no help from them. Now I get held hostage by godaddy. they want money from you anywhere possible. they dont even offer free shared SSL certificate as every other company does! they are unbearably slow. It takes like 1/2 hour just to bring up control panel file manager! Filezilla file transport constantly time outs. I cannot do anything without interruption. Compared to hostgator, they aint worth a penny. they also have this strange way of file management with this ugly looking long long file path, and they do not let your files sit outside the public_html folder. they dont use cpanel. things are organized strangely.

I am not getting paid by hostgator. I just have to get it off my chest. Now that I get held hostage. To get away, I will have to lose another 3 days of sales without guarantee that things will work immediately 3 days later.

the only good thing about godaddy is zen cart works.

[DrByte]

I'm not sure where you saw good feedback about godaddy on the Zen Cart forums ... most of it is negative ... because their hosting is crap.

They're only good for domain names ... and even in that arena there are some other good services available.

Zen Cart has several recommended hosting services ... just click on the "hosting" link at the top of every Zen Cart support site page.
Glad you found a place where you're happy.

[w2e]

thanks for the tip. bluehost is much more superior to godaddy.

[mydanilo]

So the only solution was switching hosts?

I there nothing that can be done on the hosts end? I would love to give my host a tip. They are willing but seem to bounce me off saying there is not problem...

I do like my host and would rather have it fixed than to have to switch.


Ohh, yes I do have exact the same problem. Started a thread here
http://www.zen-cart.com/forum/showthread.php?t=98472
after I discovered this one...

[sadie]

A customer in Canada had a problem checking out, and wrote:

"I was a bit concerned that I had to enter my credit card number 3 times before it was accepted, It kept telling me that my time had expired, so I had to re-enter the number and code."

Can someone look at my session settings and see if they are ok. I am on a shared server, and my ssl and non-ssl addresses match (no shared certificate). I believe these setting were made a few years ago when I did have shared ssl. I have not had any US customer tell me of any problems. I tested the site and could not detect anything wrong.

Also, I have user tracking enabaled, and went online, and another Canadian customer seemed to have abandoned the sale when they received the same session timeout error on the checkout page. Here are my settings:

Cookie Domain True
Force Cookie Use False
Check SSL Session ID False
Check User Agent False
Check IP Address False
Prevent Spider Sessions True
Recreate Session False
IP to Host Conversion Status true


Thanks.

Sadie
www.vintageknits.net/store

[jondaley]

I haven't figured it out yet, but the change on my server was an upgrade from php4 to php5. If I downgrade to php4, everything works fine. The session settings in php.ini look to be the same, and changing any of the settings in zencart->configuration->sessions don't make a difference. Admin-side sessions work fine in either case. Domain of cookie looks right in the firefox webdeveloper toolbar. Cookie-id stays the same when switching to ssl. Sessions are in files in a local writable directory, and the contents of the file changes on each click, which I assume is appropriate.

Any ideas?

[jondaley]

I fixed it by changing the HTTP_SERVER to the same URL (https://www.piexx.com) as my HTTPS_SERVER in both the front and the backend include files, and run the whole thing over SSL. I'll have to see if the server load is too high doing that, but at least it works.

[lizgjones]

Originally Posted by jondaley

I fixed it by changing the HTTP_SERVER to the same URL (https://www.piexx.com) as my HTTPS_SERVER in both the front and the backend include files, and run the whole thing over SSL. I'll have to see if the server load is too high doing that, but at least it works.

Hi, I'm having the same problem with customers being shown a time out page when they submit payment.

Jondaley - can you tell me how you made your changes? How do I tell it to run over SSL and where do I change the HTTP-SERVER? Thanks!

[mydanilo]

The info is in the config.php files.
They can be found in the following folders:

/public_html/admin/includes/

/public_html/includes/


Make sure you understand what you are doing with them. Consult your Host or read up in the forum.