Printable View
I've been through all my files and removed all URL's that point to non-secure files which has at least got rid of the "security error when trying to log in" message, but my customers STILL can't log in - all they get on submitting their email address and password is a refresh of the logging in page! Anyone know whats happening here?
What if you turn off this ...
Code:<object classid="clsid:d27cdb6e-ae6d-11cf-96b8-444553540000" codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=7,0,0,0" width="570" height="100" id="images/scroll3" align="middle">
<param name="allowScriptAccess" value="sameDomain" />
<param name="movie" value="images/scroll3.swf" />
<param name="quality" value="high" />
<param name="bgcolor" value="#ffffff" />
<embed src="images/scroll3.swf" quality="high" bgcolor="#ffffff" width="570" height="100" name="images/scroll3" align="middle" allowScriptAccess="sameDomain" type="application/x-shockwave-flash" pluginspage="http://www.macromedia.com/go/getflashplayer" />
</object>
You might also want to look at these issues in the FAQs on the security token ...
https://www.zen-cart.com/tutorials/index.php
and do a search on: "security error when trying to log in"
No, theres some sort of 'loop' running. Regardless of whether that item is in the header or not, filling in correct details in the 'Returning Customers' fields just takes me back to shopping cart contents. So I click Go To Checkout and I get back to the page for entering 'Returning Customers' or create a new account :blink:
I've done the 'token' edits already
And ... if you go to Admin->Tools->Server Information, what version information appears?
And list all the addons you've installed on your site.
ie: in what ways is your site different from a clean uncustomized install?
Server Information
Server Host: server.dnsblock2.com (85.13.232.210) Database Host: localhost (127.0.0.1)
Server OS: Linux 2.6.18-92.el5PAE Database: MySQL 5.0.51a-community
Server Date: 12/24/2008 16:30:16 Database Date: 12/24/2008 16:30:16
Server Up Time: 16:30:16 up 133 days, 20:28, 1 user, load average: 0.03, 0.03, 0.00 HTTP Server: Apache/2.0.63 (Unix) mod_ssl/2.0.63 OpenSSL/0.9.8b mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635
PHP Version: 5.2.6 (Zend: 2.2.0) PHP Memory Limit: 32M PHP Safe Mode: Off
PHP File Uploads: On Max Size: 2M POST Max Size: 8M
Database Data Size: 862 kB Database Index Size: 582 kB
I've added the mySQL and Site Backup mods, blank sidebox, additional images relocated with CSS, and the Column Layout mod. And a partridge in a pear tree :cool:
And what version of Zen Cart is it reporting on that screen?
Zen Cart 1.3.8aQuote:
Originally Posted by DrByte
Database Patch Level: 1.3.8
v1.3.8 [2008-11-04 17:14:01] (Fresh Installation)
v1.3.8 [2008-11-04 17:14:01] (Fresh Installation)
What is the content of your /includes/configure.php file, without the database password.
Code:<?php
/**
* @package Configuration Settings circa 1.3.8
* @copyright Copyright 2003-2007 Zen Cart Development Team
* @copyright Portions Copyright 2003 osCommerce
* @license http://www.zen-cart.com/license/2_0.txt GNU Public License V2.0
*/
/*************** NOTE: This file is similar, but DIFFERENT from the "admin" version of configure.php. ***********/
/*************** The 2 files should be kept separate and not used to overwrite each other. ***********/
// Define the webserver and path parameters
// HTTP_SERVER is your Main webserver: eg, http://www.yourdomain.com
// HTTPS_SERVER is your Secure webserver: eg, https://www.yourdomain.com
define('HTTP_SERVER', 'http://www.shedtraders.co.uk');
define('HTTPS_SERVER', 'https://www.shedtraders.co.uk');
// Use secure webserver for checkout procedure?
define('ENABLE_SSL', 'true');
// NOTE: be sure to leave the trailing '/' at the end of these lines if you make changes!
// * DIR_WS_* = Webserver directories (virtual/URL)
// these paths are relative to top of your webspace ... (ie: under the public_html or httpdocs folder)
define('DIR_WS_CATALOG', '/');
define('DIR_WS_HTTPS_CATALOG', '/');
define('DIR_WS_IMAGES', 'images/');
define('DIR_WS_INCLUDES', 'includes/');
define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');
define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');
define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');
define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');
define('DIR_WS_DOWNLOAD_PUBLIC', DIR_WS_CATALOG . 'pub/');
define('DIR_WS_TEMPLATES', DIR_WS_INCLUDES . 'templates/');
define('DIR_WS_PHPBB', '/');
// * DIR_FS_* = Filesystem directories (local/physical)
//the following path is a COMPLETE path to your Zen Cart files. eg: /var/www/vhost/accountname/public_html/store/
define('DIR_FS_CATALOG', '/home/shedtrad/public_html/');
define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG . 'download/');
define('DIR_FS_DOWNLOAD_PUBLIC', DIR_FS_CATALOG . 'pub/');
define('DIR_WS_UPLOADS', DIR_WS_IMAGES . 'uploads/');
define('DIR_FS_UPLOADS', DIR_FS_CATALOG . DIR_WS_UPLOADS);
define('DIR_FS_EMAIL_TEMPLATES', DIR_FS_CATALOG . 'email/');
// define our database connection
define('DB_TYPE', 'mysql');
define('DB_PREFIX', '');
define('DB_SERVER', 'localhost');
define('DB_SERVER_USERNAME', '***');
define('DB_SERVER_PASSWORD', '***');
define('DB_DATABASE', '***');
define('USE_PCONNECT', 'false'); // use persistent connections?
define('STORE_SESSIONS', 'db'); // use 'db' for best support, or '' for file-based storage
// The next 2 "defines" are for SQL cache support.
// For SQL_CACHE_METHOD, you can select from: none, database, or file
// If you choose "file", then you need to set the DIR_FS_SQL_CACHE to a directory where your apache
// or webserver user has write privileges (chmod 666 or 777). We recommend using the "cache" folder inside the Zen Cart folder
// ie: /path/to/your/webspace/public_html/zen/cache -- leave no trailing slash
define('SQL_CACHE_METHOD', 'database');
define('DIR_FS_SQL_CACHE', '/home/shedtrad/public_html/cache');
// EOF