Login Box Error

[cbmr777]

Hi!
I'm having a security error when attempting to login via the login box.

Here is the website:
http://wildhavensoap.com/index.php

Here is the error I get when trying to login:

There was a security error when trying to login.

It directs me to the login/create account page.

Here is my code:

<?php
//
// +----------------------------------------------------------------------+
// |zen-cart Open Source E-commerce                                       |
// +----------------------------------------------------------------------+
// | Copyright (c) 2003 The zen-cart developers                           |
// |                                                                      |
// | http://www.zen-cart.com/index.php                                    |
// |                                                                      |
// | Portions Copyright (c) 2003 osCommerce                               |
// +----------------------------------------------------------------------+
// | This source file is subject to version 2.0 of the GPL license,       |
// | that is bundled with this package in the file LICENSE, and is        |
// | available through the world-wide-web at the following url:           |
// | http://www.zen-cart.com/license/2_0.txt.                             |
// | If you did not receive a copy of the zen-cart license and are unable |
// | to obtain it through the world-wide-web, please send a note to       |
// | [email protected] so we can mail you a copy immediately.          |
// +----------------------------------------------------------------------+
// $Id: tpl_login_box.php,v 1.0 2003/11/21 19:16:29 ajeh Exp $
//
// Designed for Zen Cart v1.00 Alpha
// Created by: Linda McGrath ZenCart @ WebMakers.com
// http://www.thewebmakerscorner.com

// Updated to 1.3 standard (XHTML compliant) 2006/06/07  Rick Suffolk
// Edited by: Ian Manson [email protected] 2006 08 13 to include some my account links when actually logged in
// Updated 2007 12 10 for compatibility with v1.3.8

$content = "<!--loginSideBox-->";
$content .= '<div id="' . str_replace('_', '-', $box_id . 'Content') . '" class="sideBoxContent">';

if(!$_SESSION['customer_id']) {

   $content .=zen_draw_form('login_box', zen_href_link(FILENAME_LOGIN, 'action=process', 'SSL'));
   $content .=LOGIN_BOX_EMAIL_ADDRESS . '<br />' . zen_draw_input_field('email_address', '', 'size="24"').'<br />';
   $content .=LOGIN_BOX_PASSWORD . '<br />' . zen_draw_password_field('password', '', 'size="24"') . '<br />';
   $content .='<a href="' . zen_href_link(FILENAME_PASSWORD_FORGOTTEN, '', 'SSL') . '">' . LOGIN_BOX_PASSWORD_FORGOTTEN . '</a>' . '<br />' . '<a href="' . zen_href_link(FILENAME_LOGIN, '', 'SSL') . '">' . LOGIN_BOX_CREATE_ACCOUNT . '</a>' . '<br />';
   $content .= zen_draw_hidden_field('securityToken', $_SESSION['securityToken']);
   $content .='<div class="centeredContent">'.zen_image_submit(BUTTON_IMAGE_LOGIN, BUTTON_LOGIN_ALT).'</div>';
   $content .='</form>';
}  else {
   
   $content .= '<ul>';
   $content .= '<li><a class="loginBoxLinks" href="' . zen_href_link(FILENAME_ACCOUNT, '', 'SSL') . '">' . LOGIN_BOX_ACCOUNT . '</a></li>';
   $content .= '<li><a class="loginBoxLinks" href="' . zen_href_link(FILENAME_SHOPPING_CART, '', 'SSL') . '">' . LOGIN_BOX_SHOPPING_CART . '</a></li>';
   $content .= '<li><a class="loginBoxLinks" href="' . zen_href_link(FILENAME_LOGOFF, '', 'SSL') . '">' . LOGIN_BOX_LOGOFF . '</a></li>';
   $content .= '</ul>';
}

$content .= '</div>';

?>

I do have the Security Token in there but I still get the error. Can anyone help me?

Thank you in advance!

[cbmr777]

Bumping this up because I still have the error despite updating the login box mod.

Can anyone help?

Please?

[yellow1912]

You are probably using a version which was not written for zen1.3.8. The code is missing the security token. Just upgrade the module

[cbmr777]

Thank you for your reply. I have done this, though, and it does have the security token in the code. But I still receive a security area.

Any other ideas?

[cbmr777]

<?php
//
// +----------------------------------------------------------------------+
// |zen-cart Open Source E-commerce                                       |
// +----------------------------------------------------------------------+
// | Copyright (c) 2003 The zen-cart developers                           |
// |                                                                      |
// | http://www.zen-cart.com/index.php                                    |
// |                                                                      |
// | Portions Copyright (c) 2003 osCommerce                               |
// +----------------------------------------------------------------------+
// | This source file is subject to version 2.0 of the GPL license,       |
// | that is bundled with this package in the file LICENSE, and is        |
// | available through the world-wide-web at the following url:           |
// | http://www.zen-cart.com/license/2_0.txt.                             |
// | If you did not receive a copy of the zen-cart license and are unable |
// | to obtain it through the world-wide-web, please send a note to       |
// | [email protected] so we can mail you a copy immediately.          |
// +----------------------------------------------------------------------+
// $Id: tpl_login_box.php,v 1.0 2003/11/21 19:16:29 ajeh Exp $
//
// Designed for Zen Cart v1.00 Alpha
// Created by: Linda McGrath [email protected]
// http://www.thewebmakerscorner.com

// Updated to 1.3 standard (XHTML compliant) 2006/06/07  Rick Suffolk
// Edited by: Ian Manson [email protected] 2006 08 13 to include some my account links when actually logged in
// Updated 2007 12 10 for compatibility with v1.3.8

$content = "<!--loginSideBox-->";
$content .= '<div id="' . str_replace('_', '-', $box_id . 'Content') . '" class="sideBoxContent">';

if(!$_SESSION['customer_id']) {

   $content .=zen_draw_form('login_box', zen_href_link(FILENAME_LOGIN, 'action=process', 'SSL'));
   $content .=LOGIN_BOX_EMAIL_ADDRESS . '<br />' . zen_draw_input_field('email_address', '', 'size="24"').'<br />';
   $content .=LOGIN_BOX_PASSWORD . '<br />' . zen_draw_password_field('password', '', 'size="24"') . '<br />';
   $content .='<a href="' . zen_href_link(FILENAME_PASSWORD_FORGOTTEN, '', 'SSL') . '">' . LOGIN_BOX_PASSWORD_FORGOTTEN . '</a>' . '<br />' . '<a href="' . zen_href_link(FILENAME_LOGIN, '', 'SSL') . '">' . LOGIN_BOX_CREATE_ACCOUNT . '</a>' . '<br />';
   $content .= zen_draw_hidden_field('securityToken', $_SESSION['securityToken']);
   $content .='<div class="centeredContent">'.zen_image_submit(BUTTON_IMAGE_LOGIN, BUTTON_LOGIN_ALT).'</div>';
   $content .='</form>';
}  else {
   
   $content .= '<ul>';
   $content .= '<li><a class="loginBoxLinks" href="' . zen_href_link(FILENAME_ACCOUNT, '', 'SSL') . '">' . LOGIN_BOX_ACCOUNT . '</a></li>';
   $content .= '<li><a class="loginBoxLinks" href="' . zen_href_link(FILENAME_SHOPPING_CART, '', 'SSL') . '">' . LOGIN_BOX_SHOPPING_CART . '</a></li>';
   $content .= '<li><a class="loginBoxLinks" href="' . zen_href_link(FILENAME_LOGOFF, '', 'SSL') . '">' . LOGIN_BOX_LOGOFF . '</a></li>';
   $content .= '</ul>';
}

$content .= '</div>';

?>

Here is what I have now...

[yellow1912]

No token found in your form. If you made changes, perhaps you are overriding the form and only made changes to the default one?

[cbmr777]

hmmm...

I thought this was the security token?
$content .= zen_draw_hidden_field('securityToken', $_SESSION['securityToken']);

That is in there... Am I missing something?

Thank you for your help!

[yellow1912]

What I am saying is: no token is printed out in the html page (just view the source code of your site)

[cbmr777]

Oh.

I'm confused, then. How do I fix this?

Please?
This is my first ZenCart website, and I've muddled along and been able to figure things out until now... I'm just not sure what to do.

Thanks,
Christine

[yellow1912]

Read my previous comment again:

No token found in your form. If you made changes, perhaps you are overriding the form and only made changes to the default one?