Customers unable to login after upgradeing to 1.3.9c

Updated one site to zen-cart 139c (from 138a) yesterday
Most customers are placing orders without problems

One customer who was online just before and after I upgraded is having problems.
They login fine, and then what ever they click next they are redirected back to the login page and this repeats.

They are using FF3.6
I have recreate sessions set to true
I suspect its a caching problem but they insist they have cleared their cache. (Might be their ISP)
I have logged in fine to their account and don't have this problem
Could this be a sessions problem?

I don't want to roll out 139c to more sites until I work out if this is a one off problem or not?

Any suggestions?

I have did the upgrade to version 1.3.9c today and when I went
to login as a customer it was not possible it just redirected me
back to login back with no error messages or anything.

I reverted back to version 1.3.9b and could log in fine again

Quote:

---

Originally Posted by gilby

Updated one site to zen-cart 139c (from 138a) yesterday
Most customers are placing orders without problems

One customer who was online just before and after I upgraded is having problems.
They login fine, and then what ever they click next they are redirected back to the login page and this repeats.

They are using FF3.6
I have recreate sessions set to true
I suspect its a caching problem but they insist they have cleared their cache. (Might be their ISP)
I have logged in fine to their account and don't have this problem
Could this be a sessions problem?

I don't want to roll out 139c to more sites until I work out if this is a one off problem or not?

Any suggestions?

---

I'm having the exact same problem ... I also upgraded from 1.3.9a to 1.3.9c (skipping 1.3.9.b)

What I've found so far.. I've only tried two browsers, FireFox and Konquerer. I've can only duplicate the problem with Firefox.

I've cleared my cache and all the site cookies. No change.
I've closed and restarted the browser. No change.

So far nothing I've done has shed any positive light on the issue, other than it only seems to affect FireFox (??????).

I don't have the same issue on my local installation, but this was upgraded from 'a' to 'b' then to 'c' (This may or may not be relevant, but it certainly seems an odd coincidence).

Anyone else having the same problem? A show of hands please :-)

Cheers
Rod

Id help you test this.. but how do i recreate sessions?

i wiki'd this and got:
Recreate Session...(Admin - Catalog) i cant see it in that location..

Quote:

---

Originally Posted by RodG

I'm having the exact same problem ... I also upgraded from 1.3.9a to 1.3.9c (skipping 1.3.9.b)

What I've found so far.. I've only tried two browsers, FireFox and Konquerer. I've can only duplicate the problem with Firefox.

I've cleared my cache and all the site cookies. No change.
I've closed and restarted the browser. No change.

So far nothing I've done has shed any positive light on the issue, other than it only seems to affect FireFox (??????).

I don't have the same issue on my local installation, but this was upgraded from 'a' to 'b' then to 'c' (This may or may not be relevant, but it certainly seems an odd coincidence).

Anyone else having the same problem? A show of hands please :-)

Cheers
Rod

---

do you mean..

using a master password to login as a customer
or
using the button in the admin thats created from the Add-On "Admin Login as Customer"

I have a customer test account setup and when I try
to login using it, it just reloaded the login page with no
error messages etc

I believe I have the same issue and I posted about it
in this thread.

I went from version 1.3.9b to 1.3.9c though when I reverted back to version 1.3.9b everything worked ok again.


I am also using firefox version 3.6.3

i have just started to play with a 139b test site (heavily modified with add-ons) upgraded to a 139c site

while this took me all day yesterday of winmerging, lots of coffee, bad language etc. so far i have not come across any problems

on a 139b - 139c upgrade site
i can log in with an account
i can create an account
i can update my account details
i can add an address

also the mods "login as customer' and 'edit orders' seem to work

so far.. so good.. but loads more testing to do

maybe try again?..
i can give you my winmerged files for the 139c update, but they have add-on code embedded... so it might cause you other problems?

Hi Shane
Thanks for the replies there is another thread which you have replied on
http://www.zen-cart.com/forum/showthread.php?t=155453
that is reporting the same issue.
Although I have only tested this using firefox.

Quote:

---

Originally Posted by neit

Hi Shane
Thanks for the replies there is another thread which you have replied on
http://www.zen-cart.com/forum/showthread.php?t=155453
that is reporting the same issue.
Although I have only tested this using firefox.

---

yeah i noticed after i posted..

how do you turn 'Recreate Session' on or off and i will play about too... I tried the wiki but couldnt find the link in the admin>catalog

I was testing 1.3.9b to 1.3.9c on local host yesterday and encountered the same problem. Logging in as a test customer just kept getting me back to the loop of login. Using firefox 3.6.3.

Finally I cleared cache and closed out of firefox then started a new session and this time it, I was able to login.

But I hate to keep telling customers to clear their cache or something because 90% of the time, they probably won't know what a cache is anyway...

Sounds like I am not the only person having problems with 139c

Just fired up FF3.6 and had no problems

Updated to FF3.6.3 and still 139c worked fine

So not sure what to do now that it seems the problem is intermittant.

Quote:

---

Originally Posted by Shane78

yeah i noticed after i posted..

how do you turn 'Recreate Session' on or off and i will play about too... I tried the wiki but couldnt find the link in the admin>catalog

---

admin->configuration->sessions->recreate session

Just saw the threads reporting this problem and tested my upgraded version: Same problem here. :shocking:

Login worked fine on 1.3.9b until yesterday when I upgraded to 1.3.9c

changed it to false... loged in ok
changed it back to true... loged in ok

tried 2 accounts...?

even tho this is off topic... what's the better setting for faster/safer site

session recreate: False or True?

I take that back if I may :blush:

Tested in 2 other browsers and all is good, no redirection occurs.

If anyone else comes across the same "problem" then please test in another browser and see what happens. Most likely the "problem" won't be ZC related.

Same problem here.. unable to login with existing user accounts - I have a few test accounts, none work...

Same problem here - tried with Chrome and IE - no problems before upgrading to 1.3.9c from 1.3.9b...

Quote:

---

Originally Posted by neit

I believe I have the same issue and I posted about it
in this thread.

I went from version 1.3.9b to 1.3.9c though when I reverted back to version 1.3.9b everything worked ok again.


I am also using firefox version 3.6.3

---

Setting the "Recreate Session" to "false" has fixed it for me. :-)

Cheers
Rod

Quote:

---

Originally Posted by Shane78

changed it to false... loged in ok
changed it back to true... loged in ok

tried 2 accounts...?

even tho this is off topic... what's the better setting for faster/safer site

session recreate: False or True?

---

Curious. With mine:
changed it to false... logged in ok
changed it back to true... redirect back to login page
changed back to false... logged in ok

I guess for the time being I'll be leaving this set to false.

Cheers
Rod

out of curiosity... what are the pros to having recreate session set to true? and what difference does having this set to false?

Quote:

---

Originally Posted by Shane78

out of curiosity... what are the pros to having recreate session set to true? and what difference does having this set to false?

---

From memory, recreating sessions helps prevent man in the middle type attacks.

Darn it... Now I've gotta go google it to satisfy my own curiosity..

Cheers
Rod

Quote:

---

Originally Posted by Shane78

out of curiosity... what are the pros to having recreate session set to true? and what difference does having this set to false?

---

Setting to true stops customers getting the same session id from a posted link that includes a session id
It forces multiple users to get a new session id when they login

So would it be best to leave this on if possible?

Quote:

---

Originally Posted by neit

So would it be best to leave this on if possible?

---

Yes,

But if, like me, it causes a problem I wouldn't worry *too* much about having it turned off.
Yes, it does carry a risk, but the risk is no worse than it was before the recreate session function was made available (php4.3 or therabouts).

Cheers
Rod

has anyone tried this in a new install of 139c?

i dont seem to be able to reproduce this, mind you my tests are limited? so there is still a chance this could happen to me

i have only tested on
1 clean 139c install
3 test site 139b to 139c upgrades
1 live site 139b to 139c upgrades

desktop MS Vista: IE, FF, Opera, Chrome
Lappy MS 7: IE, FF, Opera, Chrome
but both share the same tinterweb conection

I had it happen last night with a site I upgraded, login in firefox just looped me around to the home page with out an error and did not log me in. I tested on IE8, chrome, safari, and opera and could login fine.

Strange I did the update this morning again and was able to login straightaway (tried it twice).
Still using firefox 3.6.3 with Recreate Session on.

With the hardended zenners having this problem and not me, i thought i must have missed something...

i tried uploading my home made 139c upgrade pack this morning to zen-cart but the zipped files size was too large and it wouldnt let me... for people to see what i had missed out.

will see if i can get the time this afternoon to upload it to my webspace and post a link

Quote:

---

Originally Posted by neit

Strange I did the update this morning again and was able to login straightaway (tried it twice).
Still using firefox 3.6.3 with Recreate Session on.

---

My customer who had been having this problem with FF3.6.3 had been on the website just before I did the update and came back soon after I put it back online.
So.... taking a stab here I think it could be a "caching" problem with FF caching some of the pre update files and causing confusion with post update files.

Customers who came "clean" to my site have not had any problems. The people not having problems may not have any of the pre update files cached in their browser.

I suspect this problem will just go away after a few days as the caches are refreshed.

ISP's also cache some files so clearing the browsers cache alone may not immediately solve the problem

PS: My customer came back today with IE8 and completed her order :D

I'm also having the problem with 1.3.9c...

It seems that all my customers who have brought this to my attention are using FF, and then when they switch to another browser, all is well.

My thought is that it could be stale cookies, but I'm not sure.

The few customers that have told me experienced this when using PayPal as their payment method. When PayPal returns them to my site, they get a Login Time Out error.

Quote:

---

Originally Posted by hey_you

I'm also having the problem with 1.3.9c...

It seems that all my customers who have brought this to my attention are using FF, and then when they switch to another browser, all is well.

My thought is that it could be stale cookies, but I'm not sure.

The few customers that have told me experienced this when using PayPal as their payment method. When PayPal returns them to my site, they get a Login Time Out error.

---

Maybe it's your SSU addon?

I'm having this issue as well!

Please post if anyone finds a fix.
I'm hesitant to set recreate sessions to false.

It seems to be only users who have FireFox, and only with PayPal EC. This wasn't an issue before upgrading to 1.3.9c

I've seen a handful of other threads about the same issue, so I doubt it's SSU.

http://www.zen-cart.com/forum/showthread.php?t=155453

i also have this problem with latest 1.3.9c upgrade and FF 3.6.3

the amount of people that have had this problem surely means that, although it is connected to FF, it needs to be attended to within Zen

i remember seeing someting on the TV about 3 weeks ago about FireFox. (UK)

it was how the latest FF is very buggy. i believe the program was Working Lunch, BBC2, 12.30PM. They had the head of FF on the programme, some woman with a MAD hair style... anyways...

it was her admiting that they got things a little wrong with this version of FF and that Google Chrome and Opera were stealing some of their thrunder... i forget now.. iPlayer it.

even tho FF breaks on me about once/twice a day, needing a restart, it's still my default browser of choice... saying that tho, i have noticed i have started to use Opera and Chrome more... no idea why i do.. maybe i do it just for a change...

wouldn't p*ss on IE tho!

wot the heck, i've only just started using FF as my main browser!!

browser world really sux!

Quote:

---

Originally Posted by gilby

My customer who had been having this problem with FF3.6.3 had been on the website just before I did the update and came back soon after I put it back online.
So.... taking a stab here I think it could be a "caching" problem with FF caching some of the pre update files and causing confusion with post update files.

Customers who came "clean" to my site have not had any problems. The people not having problems may not have any of the pre update files cached in their browser.

I suspect this problem will just go away after a few days as the caches are refreshed.

ISP's also cache some files so clearing the browsers cache alone may not immediately solve the problem

PS: My customer came back today with IE8 and completed her order :D

---

Just following up.
I have now upgraded 9 sites to 1.3.9c
Have had no further problems or complaints from customers
So... I believe that it was a temporary caching problem of old and new files in FF 3.6.3.

i tried on FF 3.6.3 as per post above for one site and i had to re set recreate sessions for me to be able to do a test log in and purchase, but had no problem when doing the same on two other websites with FF, on an upgraded version of the shop 1.3.9c

Customers log in didn't work after upgrade to 1.3.9.c in any of the browsers I tested--Firefox, IE and Chrome, I changed the recreation session to false and now log in works on all browsers

Might be the wrong fix but it works and at least customers can log in now!

I also had this problem when using FF. Did not try other browsers. Changed the recreate session to false and now it works.
ADMIN -> Configuration -> Sessions -> Recreate Session = False

Have we received official word from Zen-cart as to the reason for this issue and if there is a fix that does not require the recreate session patch?

Quote:

---

Customers log in didn't work after upgrade to 1.3.9.c in any of the browsers I tested--Firefox, IE and Chrome, I changed the recreation session to false and now log in works on all browsers

---

Which version were you upgrading from ?

Also are you running on a shared SSL server where your https domain is different from your http domain.

I rolled back my init_sessions to the 1.3.9b code, and all seems to work again.

In my case, my https domain is the same domain but without the "www"

I am reading about the login problem after upgrading to the new version. The strange thing is, I am still using version 1.3.7 and experience almost exactly the same problems.
I am pulling out my hairs, because I'm not able to solve the problem.

Two things have happened, I installed a new template, after testing it for several months and not finding any (login)problems and our provider moved us to another server, going from PHP4.1 to 5.3. Also there I found no problems.

I installed an exact copy of the shop with the new template on www.plaza33.com/shop2 made it work, renamed the working shop www.plaza33.com/shop to www.plaza33.com/shop1 and renamed the www.plaza33.com/shop2 to www.plaza33.com/shop then adjusted all info in the configs to point to the right directories. All seemed to work fine until the existing customers started complaining.

Orders were decreasing and we did not understand it. Then we found that new customers had no problems placing an order with or without account (COWOA), but many existing customers were either unable to log in or they can log in, but when they want to pay they are redirected to the log in page. No error messages.

Other existing customers are able to log in and buy without problems. When I log in as a customer, no problems at all. Some use firefox, many use IE7 and IE8. No common grounds to be found for the problems.

Setting recreate sessions to off makes no difference, emptying browser cache does nothing, but using another browser than before does seem to get around the problem.

What does seem to help is that I log in as the customer on my PC and log out again, some of them experience no problems logging in after that.

When I think I solved it, a few hours later the next customer emails "I can't log in......".

I am really freaking out.....

I can not test it, because what ever I do, on all our PC's, I get no errors myself. I have to rely on what the customers tell me.

Does anyone have a clue what I can do? Upgrading is no (easy) option, because I have built and implemented a complete purchase order- and stock management system and integrated it with the shop.

Frank.