What are your settings in the Configuration ... Sessions ... in your Zen Cart Admin?
What are your settings in the Configuration ... Sessions ... in your Zen Cart Admin?
Linda McGrath
If you have to think ... you haven't been zenned ...
Did YOU buy the Zen Cart Team a cup of coffee and a donut today? Just click here to support the Zen Cart Team!!
Are you using the latest? Perhaps you've a problem that's fixed in the latest version: [Upgrade today: v1.5.5]
Officially PayPal-Certified! Just click here
Try our Zen Cart Recommended Services - Hosting, Payment and more ...
Signup for our Announcements Forums to stay up to date on important changes and updates!
I have to disable secure admin area before I can view the setting, as even the admin page is not accessible due to this problem with secure_html.
As soon as I login from secure location, I get into admin page, BUT, if I try to go under any menu, it logs me out.
As for session setting, I have not touched that section and kept it default as everything was working fine in the past.
I will post the setting as soon as I disable secure admin and login from public_html.
ok... I have confirmed it with my own account with newly purchased SSL on the same hosting company (he.net) that it's their apache's glitch.
I've installed another fresh copy to www.saitomedia.com/test and this one is working fine.
I don't understand why apache can suddenly corrupt like that without any reason. I wish i know what's the cause of this loss of session between public_html and secure_html folder so I can convince my host to look into this problem for their sake.
I hope this is not a common error and that this thread provide another perspective to the "your shopping cart is empty" errors.
Anyway,
thank you Ajeh and Stevesh for your concern, and for your time. It's very comforting to know that I have great help when I'm in trouble.
Suhosin was causing this issue all this time. At least I know now. Now my site is working again with a little .htaccess edit to disable encryption on session. Issue solved.The ***** server has installed Suhosin to make php5 more secure.
***
HE Support
Last edited by saitomedia; 4 Dec 2008 at 04:54 AM.
Thanks for the update and for posting the issues that you were having with your hosting provider who had settings on the server that were preventing things from working correctly ...
This will help others with similar issues ...
Linda McGrath
If you have to think ... you haven't been zenned ...
Did YOU buy the Zen Cart Team a cup of coffee and a donut today? Just click here to support the Zen Cart Team!!
Are you using the latest? Perhaps you've a problem that's fixed in the latest version: [Upgrade today: v1.5.5]
Officially PayPal-Certified! Just click here
Try our Zen Cart Recommended Services - Hosting, Payment and more ...
Signup for our Announcements Forums to stay up to date on important changes and updates!
Do you mind posting the .htaccess edit you made?
.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole
Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.
Sure,
This .htaccess file was placed in the root directory alongside public_html, secure_html and cgi-bin folder.Code:php_flag suhosin.session.encrypt off
Summery of this thread in keywords:
Symptom: "your shopping cart is empty", "Whoops, your session has expired", suddenly happened.
Cause: Suhoshin applied to your host, it was encrypting session.
Solution: Write .htaccess to override encrypted session.
Last edited by saitomedia; 4 Dec 2008 at 05:41 PM.
Hi Time,
Yes, place the .htaccess file where those folders are (root directory), not inside of them.
Hello Saitomedia,
That .htaccess fix is exactly what I was after.
2 hours of solid searching found your fix
Thanks !
Brad :)
Bookmarks