"There was a security error when trying to login" - v1.3.8

Quote:

---

Originally Posted by DrByte

FAQ on the "security error when trying to login" issue:
https://www.zen-cart.com/tutorials/i...hp?article=312

---

I read the FAQ but it is not quite for my problem.

I am a ZC newbie. I did my first install on Nov. 30, so by chance, I started with v1.3.8. I did the install with SSL 'false' in the various files because the SSL certificate I'd just purchased hadn't been installed yet. Everything went very well, and the login process was functioning correctly.

Today, with my SSL certificate in place, I went about installing the Google Checkout payment module. I customized various "login" files, and I changed those SSL 'false' lines to 'true'.

Then I discovered the "There was a security error when trying to login" problem.
At first I thought I'd erred in the SSL settings. But having read this thread, I think the Google module I downloaded from Google.com lacks the new "security token" portions in the files:
- /includes/templates/YOUR_TEMPLATE/templates/tpl_login_default.php
- /includes/templates/YOUR_TEMPLATE/templates/tpl_timeout_default.php
(and (?) /admin/login.php).

Since I'm new, started with v1.3.8, have nothing old to copy from, and am not much of a programmer, I really don't know what code I need to insert into those files, and exactly where I should insert it. I'm also not 100% sure that my SSL setting is unrelated to the problem.

I would greatly appreciate any advice.

Thanks!

Your URL?

Hmmm... After upgrading from 1.3.7.1 I am having this problem with my admin login. The user login works fine and all the data in mysql seems to have transfered over fine.

I checked, and my admin/login.php file is exactly the same as the one that 1.3.8 came with.

Any ideas? :(

Here's the link I am using:

http://birdingdepot.com

You need to add a "/demo" to that link to see my site in 1.3.8. I didn't want to add it because the next thing I know Google will index it!! :)

Try clearing your browser cache and cookies.

Thank for the tip, but unfortunately it didn't work. I tried it with several browsers, on two computers, cleared the cache and cookies. No dice... :( It won't let me log on to admin.

Yeah! I think I figured it out.

Since I was using a test site in a different directory, I had to change a lot of lines in my configure.php to reflect this directory. I only changed the first four. After changing all 7, it worked like a charm! :)

Thanks for the update.

Any reason why the new tpl_login_default.php is an older build than the the one written by DrByte in June this year?

Quote:

---

Originally Posted by numinix

Any reason why the new tpl_login_default.php is an older build than the the one written by DrByte in June this year?

---

It's because the new securityToken feature was built in February, but other fixes built earlier were included for the June PayPal patch and released as part of the July v1.3.7.1 release. There has been no need to update the v1.3.8 edition of the file since February.
It's a lot of fun keeping multiple software versions in sync. :smile:

That's why we got the mastermind DrByte ;)

Btw, for those who have blank login pages, it may be something to do with create_account.php found in the modules folder. This file needs to be merged with the latest version if you have the CAPTCHA module installed.