Login Time Out after entering credit card details?

[harry2cool]

It's set to 60 on my Zencart and 30 in the main php.ini file on my server.

Should I change anything here ?

[DrByte]

Have been using the same payment module for more than 2 years , also running the same module on other websites without this problem as of now(on the same new server).

What exactly is different in all the files and settings and domain configuration between the site that's allegedly having problems vs those that aren't?

Also, what patterns exist amongst the customers who are having problems? geographic region, browser used, browser settings, cart contents, operating system, dialup vs hi-speed, time of day, using coupons or not, and the list goes on.

Further, if you use a different payment module instead, perhaps one of the built-in ones, does the problem continue? What have you done to ensure that the payment module itself isn't the problem?

[harry2cool]

Hi DrByte,
To ensure the integrity of the payment gateway, this same module is installed on 2 of my other websites and it works fine.

I did manage to recreate this error.


============================================
If there is an error on the payment gateway (i.e wrong input of any credit card details) , it returns a blank page

Below is the URL which shows the blank page:

'http://www.xyz.com/index.php?main_page=checkout_payment&PaymentID=2894610210902850&auth=&amt=20.0&r ef=&tranid=&trackid=4551221862221&postdate=&result=&udf1=50s%20Cotton%20Dress%20 Sh&udf2=harryfashion######################&udf3=9821142770&udf4=Rue%20De%20Palac e%20New%20York%20New%20York%20100011%20United%20States&udf5=1&error_message=Ther e%20has%20been%20an%20error%20processing%20you%20credit%20card%20at%20yourbank.c om,%20please%20try%20again.

The above page should show the checkout_payment page however it shows a blank page, here is where the problem is.
=========================================

I guess if the above problem is rectified all the problems can solve.

Please let me know what I can test to correct the above.

[DrByte]

Your module is using old-style coding that's not compatible with v1.3.9.
It's passing error messages and long parameters on the URL.
You can't pass long error messages via the URL. You should be using the messageStack to do that.
Further, in addition to error messages, any other parameters which have values longer than 43 characters are also treated as spam or attempts at hackers to exploit old vulnerabilities, and are thus met with a 406 error and a blank page.

You need to update your module to work accordingly.

[harry2cool]

Hi DrByte,
The long url solved the blank page problem, THANKS.

I found out about the "Time Out" issue, it happens when a customer uses Internet Explorer.

FireFox works fine.

I have given the module for testing, any other fix I can use for this ?

Thanks Again

[jarvis_ht2000]

I am harry2cool's developer, we have done some research for "Login Time Out" after back from credit card payment holder.
At last, we find out if the zenid remove from the query string, it will show "Login Time Out" message. I know the zenid use to track login user status. But our other two sites can work after remove zenid parameter.
We have checked codes and site configuration, there are no difference.
Can you help us?

[DrByte]

The zenid isn't used only to track login user status.
It's actually the PHP session ID.
Without it, PHP can't link up the customer's session to the software, and *that* is why it can't track the user's login status.

Basically, you have a PHP sessions problem to fix.

[jarvis_ht2000]

Hi, DrByte

yes, if we remove the zenid from url, the site should be work fine, right?
so our site session has some problem to holder customerid and cart content, right?
I will check site seesion.

Thank you very much!
Jarvis

[kobra]

if we remove the zenid from url, the site should be work fine, right?

No, not at all read

Without it, PHP can't link up the customer's session to the software, and *that* is why it can't track the user's login status.

[jarvis_ht2000]

Yes, I know that.
The zenid can be removed from URL at our two sites, also the sites don't show "Login Out Time" message.
Just one site can not work at this cause. so we very confuse why have these different result, can you give me information for zenid?