Customers Cannot Log In To Their Account...

[khopek]

I received a few emails from customers stating they are unable to log in to their account. I verified this as I cannot even log into my account as a customer. Further more, they only error you see is 'ERROR_SECURITY_ERROR' which is not helpful in the least.

At one point this error was caused by the How Did You Hear About Us Mod, so I got rid of it because it wasn't working anyway.

Can anyone point me in the right direction to fix this?

Website

Thank you in advance!

[skipwater]

I noticed that Google ads in your footer are turning off the ssl and that is why I think you are getting the 'ERROR_SECURITY_ERROR'

Skip

[DrByte]

Further more, they only error you see is 'ERROR_SECURITY_ERROR' which is not helpful in the least.

The reason it's showing the ALL_UPPERCASE_PART is because you've forgotten to include the new define for that particular definition into your language files when you upgraded from a version that didn't have it. (or installed an addon that didn't have it cuz it was built for a prior version)

So ...

1. Upgrade all your language files, including your overrides, to include any and all definitions that are missing when comparing to the original master files.

2. Fix your security problem: https://www.zen-cart.com/tutorials/i...hp?article=312

[khopek]

I noticed that Google ads in your footer are turning off the ssl and that is why I think you are getting the 'ERROR_SECURITY_ERROR'

Skip

Yeah the Google Ads are a pain. Because they aren't SSL, it gives and unsecure warning when in IE if you try to go to any SSL page. Not sure how to fix that one yet.

As far as upgrading...This all uppercase issue first started with the How Did You Hear About Us mod. Since that mod didn't work correctly anyway, I got rid of it. I'll go through and check everything again.

[stevesh]

Yeah the Google Ads are a pain. Because they aren't SSL, it gives and unsecure warning when in IE if you try to go to any SSL page. Not sure how to fix that one yet.

If you don't mind a suggestion, get rid of them. As a customer, I find any outside advertising on an ecommerce website kind of confusing, and you're inviting your visitors to go somewhere else. They may come back, but they may not.

[khopek]

Thanks! I fixed the security error by upgrading my files. Odd that the template_default login file never got upgraded. Now everything works!

[Kayla]

I've got a new install 1.3.8a. It couldn't be more basic... The only thing I've added is Google Analytics/Conversion Tracking mod but even when I turn those off I still get the Security Error and can't log in.

Can anyone see what am I missing?

My SSL is standard (not shared). I don't have/have never had this problem on my other sites.

http://ezbarcodes.com

Thanks in advance

[Ajeh]

You are calling images:
/images/creditcardicons.jpg

and appear to have this hard coded as an absolute vs relative image so on secure pages it is coming up as non-secure ...

[Kayla]

Thank Ajeh. I'm not quite sure what you mean by that. That is part of a banner and I have the SSL in the banner manager set to "yes" and I also change the path to https in the ad and it still gives me the security error.

[Ajeh]

Can you check what your secure certificate is for, with or without the www ...

If it is without the www then you need to configure your site in the two configure.php files at:
/includes/configure.php
/admin/includes/configure.php

without the www in the URL references ...