Maximum execution time of 120 seconds exceeded when viewing Whos Online in my admin

[CJPinder]

hmmmm...very odd. Okay, next question...can you tell me what the define('STORE_SESSIONS',......) line says in your includes/configure.php file and in your admin/includes/configure.php file (they should be defined the same but you never know).

Regards,
Christian.

[ppruett]

FOR
/admin/includes/configure.php

define('STORE_SESSIONS', 'db');

FOR
/includes/configure.php

define('STORE_SESSIONS', 'db');


-- lol, tag, your it. :)

[CJPinder]

Right....can you see your database in something like phpMyAdmin? If so could you browse the sessions table (possibly called zen_sessions or something like that). Does the value field of each record look vaguely readable and contain things like 'customers_host_address|s' and 'language|s' or are they all a seemingly random set of upppercase and lowercase letters and numbers? or maybe some readable and some not readable?

If you look at the structure of the sessions table can you tell me what the type and collation of the value field is?

Thanks,
Christian.

[ppruett]

Nope.

looking at one of the carts that is 1.3.8a (latest version)
It does not look fun readable....
I gave an partial dump of table using phpMyAdmin export to show structure also...

structure:

     Field              Type         Collation      Attributes      Null      Default 

    sesskey     varchar(32)     latin1_swedish_ci         No             

    expiry             int(11)                     UNSIGNED     No     0 

    value             mediumblob                  BINARY             No             


BROWSE EXAMPLE:

sesskey                      expiry         value

ftkfm602e43gclq9mb3dpg3qj6     1202846695     [BLOB - 1.0 KiB]
lpaa0mi4ep2ic6irvj82rph5d0     1202846955     [BLOB - 1.1 KiB]
25i9cvg6n2ekg20j37ul09pki5     1202846942     [BLOB - 1.2 KiB]
4g4cje4hied163t71f57vm6sm5     1202847008     [BLOB - 1.2 KiB]
gdjcaqv7abjb31hd16j656lcv0     1202847096     [BLOB - 1.2 KiB]
2t3k8snqkro82ektsgc4qh5vv3     1202846032     [BLOB - 1.0 KiB]
2c5lf0tchv3h0finlak5a5lpi0     1202847558     [BLOB - 300 B]
......


CREATE TABLE `sessions` (
  `sesskey` varchar(32) NOT NULL default '',
  `expiry` int(11) unsigned NOT NULL default '0',
  `value` mediumblob NOT NULL,
  PRIMARY KEY  (`sesskey`)
) ENGINE=MyISAM DEFAULT CHARSET=latin1;

INSERT INTO `sessions` VALUES ('ftkfm602e43gclq9mb3dpg3qj6', 1202846695, 0x4e454a4e636b36346b596d6f6c416768747037697749305168337361706c5147726b6b5f4b613841335733765843627a4f53456f484d3450676874494c3432773763774170496831776f2d484250324c736a4f52664f7231505f712d684b485130624f63394276564f466662576132654e3752575678624a6e6338327363476d42314f616e55623545784d6a413662534e7770396661744b674e3756304a754b50474c536d5a4f436e67574874764d79376b2d46414267457753395a647a67474d71505a656a6a6263336c765a386f74584379763967546a795f6549324b723863526236375659343974374864414139345634304c516e31495a5a4e424d344636583270326c7066635775737330494e7352777470795f536970484e4952384d355a6c4f642d734871643262454d776e38723658496a6b4473366a434f4868376b44704a4d746a566d34693450444d4e7747367955717a7a6462646c72775676365466615331354c4d686d48753650376148306f354b74394a743075724241654b7261574759417053444e41556e2d4e33516931636447787968594d515f7475326345506a635a306a755531666e544c4a723641786d6a645872357043586457574f6c666c6b7270567762307835543645742d56684d524e525370636b452d6274337239316938706f546c787139766977514a65776a475948487669715837374648645f705762516f56683550637768495f786a33394f35515a773669357a4b6d3872666d6479317442424f4f4469674f543731464f483179425f32326e51353150335a57314b4c5f53316171756f72684536462d44434f566e367a67484e4264554e6b422d44477758584c7972467646735044635255414e77664f396476377270517969435837334550747a314e447433396c30467442676c64563478685076467230376e38692d6f615a507659426a635672766e6354314b4e6f664a78384b71554c796d3050435f582d3771554f3761796833483441637a48744d4c7570307977596f6962476952365137706768525159585278306751614962306d41784f32315942634e4b363777774c654472486e716a77734f3431596b64654d5f7653384c674c6b615749694a6866707a37624441415f7a4d48685147374a626768765935727068436e44626b466e6a78444a70326536544a4639396d3652503675374a3239726267314a63567a64596f4877594e7763654542646b5f576e6136636564647a7a6e35464c7230334f49394679614d70785030436f36506e4151355a657836447645304961476a307033765147646839754f4d6e767a7444676d6a722d6c6c7838476a43683658494d795357395f6d636c316b4254594a4636754653664a47324454686f387643573870717878776565724e6c4847424a6b5f6a394a6a6e5f6d747a6c5f3849706b427a52766131746658465545506231307348654378724950334254533945772e);
INSERT INTO `sessions` VALUES ('lpaa0mi4ep2ic6irvj82rph5d0', 1202846955, 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);
INSERT INTO `sessions` VALUES ('25i9cvg6n2ekg20j37ul09pki5', 1202846942, 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);
INSERT INTO `sessions` VALUES ('4g4cje4hied163t71f57vm6sm5', 1202847008, 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);
INSERT INTO `sessions` VALUES ('gdjcaqv7abjb31hd16j656lcv0', 1202847096, 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);
INSERT INTO `sessions` VALUES ('2t3k8snqkro82ektsgc4qh5vv3', 1202846032, 0x4a414b352d594174666e4e69306861632d396e714f533635585a354d585a596631527268574a58665546386d466956624e7658425a4e7147676a67476d467133487964485457617a4b42387251657a4857456e6f6463752d364a6e51376a654a577662454849414c71784765466d6447796a483268645846376e4956557154594273672d6b4d4259494f435763634669654c7733707350587241714b42714d554279493873327052384145773778646e614a7a4c52666e696f62596a57554e6b3270394966786a7066306d586256704f4e5f4b3458412d4252396e484f435974764d6532705a394f4a35786f6b613371443653742d705f377559366d36554b50326769776e4545383344733436324670306b7a786434616c4b4e455347586954647536332d556b4d5a4361726f56787852306c62484c414557635a577177653170505553326e6968326f31424c4f655a684438677770694f334675756736644b623731655454546a4650454649664b694e5f4b65442d735f716d4c7159787038704b6c6e6b45776377496c4f586f6e465f75354a453449686c555f6557315a6c64325562576a78735858664d684f38737539324b4a6e50464754466e576a73426c7a5a637557716d684c7279626f657276566e6b746a2d7475727734546565766c64536b52467a566f79675136634251326a68756358444d795f4d583334354b64793870796a4c6d504239594449695241705038684475585f6e37574b75413270544a53473077507861323242584637536b7255596a453951495376463545436659774d596950646f34524e6a504265475a4f6238387875656741794759534a4b594d6e7a395f366d54336d392d4553395a69436152614b424d5a4668506645526278677a616d7877702d426559484630666364793876693869495349312d4f5a68326e6e593069796e4c4f41772d44714677485145416d7563424d4b44432d4a47386e39555538695f71397539786b43707472344279375a6a595f694359524c6761743444774f647044596959445639513872496964474f78674b6d5748374f684773334f707036625f4e6b54546e3238744e696e6c4462556d6257697450626d79694b2d374737694f3178416557334f392d597331645f6972327a766348514c5273577a4b393376435752744f493459655a366e6d6b6f3931456f52767132393761684a547247486e6458723239355a6b3479326d2d6e307971546d72524364705548746441776b4c6d506a4b3247724238344e51426635744d316b5174436458535a2d567a774e745743444f6332792d524f4a6a41707638525561496331755a7952555154643163394e5a37753534416b625a4e4f4c4a634f4b416a586659366e4156473148574c454258754348316164583753557269744d4b473934304538674c706141775673544e6c544366534b4e394f527a6d4e4671726470774679773756566c4d4d69592e);
INSERT INTO `sessions` VALUES ('2c5lf0tchv3h0finlak5a5lpi0', 1202847558, 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);
........

[CJPinder]

Thanks for doing that. I'm pretty sure now that your session data is being encrypted. This is not something that Zen Cart or PHP normally do. Most likely your host has installed something like Suhosin.

Can you ask your host if they are using Suhosin with their PHP installation and if so can they switch it off for you? If they are using it and they switch it off for you it is likely to break any sessions that are active at the time so best ask them to switch it off at a quiet time.

Regards,
Christian.

[ppruett]

I have root. (got milk?)
The server I am using to show this issue is openbsd current, 4.2 almost 4.3
with the default packages as two weeks ago for current. Since openbsd is known for security, I suspect that the default package may have installed 'hardened' which in after thought is a good thing.
Fiver years ago I use to do my own packages, but now that the unices are getting better at maintaining ports, I should not have to, and I don't miss getting php mysql mod_ssl and others to work from scratch...


Use to be for openbsd you could choose package either php or php 'hardened'

Looking at the Makefile for the current openbsd port of php5,
it appears by default now php is packaged with SUHOSIN_V= 0.9.20
SUHOSIN_P_V=0.9.6.2

And to have a package without 'harden' required a custom 'pseudoflavor'

excerpt from /usr/ports/www/php5/Makefile.inc
----------------------------------------------------------

PSEUDO_FLAVORS+=        no_suhosin
FLAVOR?=
.if ${FLAVOR:L:Mno_suhosin}
SUPDISTFILES=           suhosin-${SUHOSIN_V}.tgz:0 \
                        suhosin-patch-${V}-4{SUHOSIN_P_V}.patch.gz:0
.else
DISTFILES+=             suhosin-${SUHOSIN_V}.tgz:0
PATCHFILES=             suhosin-patch-${V}-${SUHOSIN_P_V}.patch.gz:0
PATCH_DIST_STRIP=       -p1
CONFIGURE_ARGS+=        --enable-suhosin
.endif

OKAY, I can with effort make a flavor w/o suhosin, to help you debug zencart, but I hope zencart can work with --enable-suhosin.

I may not be able to get to this immediately, have a drupal admin issue at the moment, but will endeavor to do so soonest...


BTW, do you think/know if using suhosin, will cause the cart not to work elsewhere? I have two low activity carts on this server and other than the admin whos online, I have not got heard a complaint about lost sale--- yet.... ?

[ppruett]

DRATS

sorry, the port seems to be ignoring or misinterpreting... the env FLAVOR=no_suhosin


so short answer, I don't have the non-hardened package of php, would/will have to see why the flavor is not taking on the port package make, and being current, I might not get a quick answer... unless I dig it out myself...

Wonder if some of the other posters could help on this, I was not the only one seeing this and could chime in about their php setup.?

maybe latter in the week.
sorry.

[CJPinder]

I have root. (got milk?)
The server I am using to show this issue is openbsd current, 4.2 almost 4.3
with the default packages as two weeks ago for current. Since openbsd is known for security, I suspect that the default package may have installed 'hardened' which in after thought is a good thing.

Using hardened PHP is a good thing, unfortunately I don't think Zen Cart 1.3.8 and older has been tested with it.

If you are in charge of your own destiny then probably the easiest thing to do is to just switch of suhosin's session encryption. If you edit your php.ini file and add or change the following setting...

suhosin.session.encrypt = off

You can then either manually clear the encrypted sessions out of the session table or just wait for them to time out.

OKAY, I can with effort make a flavor w/o suhosin, to help you debug zencart, but I hope zencart can work with --enable-suhosin.

BTW, do you think/know if using suhosin, will cause the cart not to work elsewhere? I have two low activity carts on this server and other than the admin whos online, I have not got heard a complaint about lost sale--- yet.... ?

I really don't know what other issues will arise, if any. If everything else is working then you are probably fine, without lots of testing it is hard to say.

Whether or not Zen Cart will ever work fully with suhosin is outside of my control, that is up for the Dev Team to decide. I am just a humble forum poster who likes to stick his nose in.

The issue is likely to start becoming more widespread though as suhosin becomes the default for more packages.

Regards,
Christian.

[time111]

Hi,

My host provider on my request completely disabled Suhosin, but the problem still persists.

I use 1.3.8a zen cart.

Waiting eagerly for anybody's feed back.

~ Time

[sdc888]

What web server are you running? Things were running perfectly on Apache with out of the box Ubuntu MOD_PHP settings, however I just upgraded to litespeed and am seeing this same issue. I'm going to go line by line through the apache and litespeed php.ini's to see where the issue is -- will also try recompiling PHP without suhosin.

I figured something had to break with this upgrade.