Admin Login Issue - 1.3.7.1 and old version of PHP: 4.3.2

[thehighlandsgroup]

So I've completed new install and having same issue logging in the Admin Panel. I'm running 1.3.7.1 and PHP 4.3.2.

For us novices with PHP can you give us a line number or even better yet a before snippet of code and after snippet of code?

The Highlands Group

It seems that logging into the admin pages with zen-cart-1.3.7.1 using PHP-4.3.2 is broken. After entering the correct login/passwd, it will just return back to the login page.

The issue has to do with the call to session_regenerate_id() from zen_session_recreate() in includes/functions/sessions.php (which is called from admin/login.php).

According to the php documentation for php, "Version 4.3.3: Since then, if session cookies are enabled, use of session_regenerate_id() will also submit a new session cookie with the new session id." See the documentation here:

http://us.php.net/manual/en/function...enerate-id.php

That means that 4.3.2 does not submit a new session cookie with the new session id.

The fix provided by buraks78 in the comments in the link above seems to address the issue and fix the zen-cart login to the admin page.

Basically, add this directly after the call to session_regenerate_id() in includes/functions/sessions.php:

  if(!version_compare(phpversion(),"4.3.3",">=")){
     setcookie(
        session_name(),
        session_id(),
        ini_get("session.cookie_lifetime"),
        "/"
     );
  }

Herb.

[misty]

So I've completed new install and having same issue logging in the Admin Panel. I'm running 1.3.7.1 and PHP 4.3.2.

Why install 1.3.7.1 when latest version 1.3.8.a would undoubtedly fix
your problem?

[thehighlandsgroup]

Sorry. My mistake. Version is 1.3.8a. So problem exists with latest version.

[thehighlandsgroup]

I have run new password script to log into Admin section and changed password in backend. This is a fresh install. I am able to login successfully using Firefox browser but not IE 6.0. I've cleared cache, cookies and history in IE. I also went to cookie files and deleted. Firefox works and I can work in admin area but can't in IE?

What gives?

[thehighlandsgroup]

As a matter of courtesy to other Zenners - I was able to resolve the issue on my own.

I added the code in the posting above where there are not 1 but 4 instances directly after the call to session_regenerate_id() in includes/functions/sessions.php file.

I rebooted computer, cleared cookies and files from IE and FF browsers. Cleared files in cache on server and voila it worked.