Printable View
Only bad thing about this is that...someone tell me if I'm wrong...is that if someone copies and pastes, or a crawler grabs a URL that has the session id in the code...multiple people could connect at the same time and see some of each others information.Quote:
Originally Posted by anjordan77
TheOracle....PMd you the code. Looks strictly HTML to me, but something is causing problems. Maybe it's a certain character combination or something...not really sure. It's easily reproducible to me though. I could check again tomorrow, but I was reproducing the login issue with 2-3 different pieces of HTML affiliate code...where as others were allowing login. Very strange...
Thanks for posting the solution on this problem. :wink2:
What the hell ?? I posted a reply on a different topic and it ends up in here ? :blink: :blink: :blink:
Thanks for specifying that it may be XML parser related. Here....I'll just post the code.
<a href="http://www.tkqlhce.com/click-2005953-10362017?url=http%3A%2F%2Fshop.starwars.com%2Fcatalog%2Fproduct.xml%3Fproduct_sk u%3DSWGGDVCS%26rid%3DCJADPL00001&cjsku=SWGGDVCS" target="_top">
<img src="http://shop.starwars.com/image_file.xml?product_sku=SWGGDVCS&image_type=t" border="0" alt="Exclusive Chrome Plated Darth Vader Statue"/></a>
<img src="http://www.awltovhc.com/image-2005953-10362017" width="1" height="1" border="0"/>
Basically I have some code like this that produces the results...and others that are just slightly different that do not.
This code...same affiliate...does not produce the error.
<a href="http://www.jdoqocy.com/click-2005953-10362017?url=http%3A%2F%2Fshop.starwars.com%2Fcatalog%2Fproduct.xml%3Fproduct_sk u%3DSWHBEUP%26rid%3DCJADPL00001&cjsku=SWHBEUP" target="_top">
<img src="http://shop.starwars.com/image_file.xml?product_sku=SWHBEUP&image_type=t" border="0" alt="Kir Kanos & Mystery Figure Expanded Universe 2-pack"/></a>
<img src="http://www.ftjcfx.com/image-2005953-10362017" width="1" height="1" border="0"/>
theoracle...zen is after you...watch out you might end up with a bunch of agent smith's at your house.
Another thing...it only happens when the banner is set to NOT SHOW DURING SSL SESSIONS. So, if I allow the banner during an SSL session...login will work. Any ZC creators know what could be causing this?Quote:
Originally Posted by deadeye
The problems with AOL and your cart are caused by AOL and not the cart. It's all down to the stupid way AOL (a.k.a. A O Hell) works.
When someone comes to a page on your site using AOL as their ISP then AOL caches each element of that page on different servers with different ip addresses. So let's say that the page is index.php, which calls in the header, footer, left and right columns, application top and bottom, languages, and multiple image files - they all get cached all over the place at different servers. I have seen AOL, even on a simple html page, recording 18 to 20 separate user sessions in the stats programme. Goodness knows how many user sessions they create for the Zen Cart pages.
The Recreate Session is usually the straw that breaks the camels' back as far as AOL is concerned - just one hurdle too many for it to deal with and it drops the session trail.
Vger
Crap...you are right. Those banners were causing me problems. Now I see AOL preventing logins with 'Recreate Session' set to True. This DID NOT happen in 1.2.5, but is occuring now that I'm using 1.3.0.2.Quote:
Originally Posted by Vger
Ok. What I did to resolve the problem was revert to code from 1.2.5d (because I had it on-hand) for the function zen_session_recreate() in /includes/functions/session.php
Something in the changes for that function are not meshing well. My host is PHP version 5.1.4 (Zend 2.1.0).
I was trying to test changing things in that function, but could never get it to work in all scenarios. Could get it working if I had nothing in my cart when trying to login, but otherwise it's redirect me to the homepage with an empty cart. Then when I could login the item would be in my cart so that part worked. Very strange...maybe something about the 'session_id and session_regenerate_id' call aren't quite working right. Not sure.