No longer able to log into Admin

[Sean.Hoffmann]

Good Morning,

So the store front is running fine as far as I can tell (we use this for out Rugby club to make it easier for everyone to pay dues, purchase gear so not too much traffic).

Recently the hosting company increased security measures and requires a more secure password to log into the hosting account (to get to the site admin panel).

I am not sure if it is coicidence to the new hosting password or not, but when I go to the admin log on page (http://sundaymorningrugby.com/store/admin) I get the following error:

Sean||[email protected]||[email protected]
Warning: session_start() [function.session-start]: Cannot send session cookie - headers already sent by (output started at /home1/sundaym2/public_html/store/admin/includes/functions/extra_functions/product_music_functions.php.LCK:1) in /home1/sundaym2/public_html/store/includes/functions/sessions.php on line 108

Warning: session_start() [function.session-start]: Cannot send session cache limiter - headers already sent (output started at /home1/sundaym2/public_html/store/admin/includes/functions/extra_functions/product_music_functions.php.LCK:1) in /home1/sundaym2/public_html/store/includes/functions/sessions.php on line 108
Sean||[email protected]||[email protected]||Sean@IdleHandsTech .com
Warning: Cannot modify header information - headers already sent by (output started at /home1/sundaym2/public_html/store/admin/includes/functions/extra_functions/product_music_functions.php.LCK:1) in /home1/sundaym2/public_html/store/admin/includes/init_includes/init_templates.php on line 36

Warning: Cannot modify header information - headers already sent by (output started at /home1/sundaym2/public_html/store/admin/includes/functions/extra_functions/product_music_functions.php.LCK:1) in /home1/sundaym2/public_html/store/admin/includes/functions/general.php on line 21

I have searched and already checked each of the referenced pages for white space before and after the <?php...?> but it didn't help. I keep coming back to the change of the site password, but am not sure where to check/update within ZenCart.

I still have FTP access to the files and can make needed changes (once I know what they are).

Thank you all much in advance!
~Sean

What version of Zen Cart are you using?
Not sure, installed latest ~5 months ago, no upgrades

What addons have you installed? When?
In what ways is your site customized or different from a brand new uncustomized install? No add-ons or major customizations (I changed image files for color and banner changes)

If you're encountering problems that could be related to your server or hosting company, include the name of your hosting company (not their URL). This site is hosted by Blue Rhino

HAVE YOU LOOKED IN THE FAQ AREA for answers to your question? (ie: a search for your error message or what you want to edit/change, etc)
Have you searched the FORUM for your error message or for answers to the question you're asking? I have searched this forum/FAQ as well as googled for suggestions. All I found was to ensure their is no white space or hidden characters. I cut/paste into word pad and did not find either.

[kuroi]

Most likely all the problems that you are having are related to the output of this text

Sean||[email protected]

That being sent to your browser very early in the page building process is preventing that process from completing properly and trigging the subsequent errors.

Unfortunately, I can't think of any reason why a normal Zen Cart would send that to your browser (let alone twice).

Did your hosts revised security arrangement require any changes to files on your site?

[RodG]

I am not sure if it is coicidence to the new hosting password or not, but when I go to the admin log on page (http://sundaymorningrugby.com/store/admin) I get the following error:

Warning: session_start() [function.session-start]: Cannot send session cookie - headers already sent by (output started at /home1/sundaym2/public_html/store/admin/includes/functions/extra_functions/product_music_functions.php.LCK:1) i

Do you use Dreamweaver? If so, the following threads may help;

http://www.zen-cart.com/forum/showthread.php?t=68949
https://www.zen-cart.com/forum/showthread.php?p=649087

Cheers
Rod

[kuroi]

Ah yes. I think Rod's nailed it. Spurious files being uploaded by tools designed more for designers than programmers that litter spurious and unhelpful files.

At Kuroi we abandoned Dreamweaver several years ago in favour of a proper Eclipse-based development environment.

[Sean.Hoffmann]

Most likely all the problems that you are having are related to the output of this textThat being sent to your browser very early in the page building process is preventing that process from completing properly and trigging the subsequent errors.

Unfortunately, I can't think of any reason why a normal Zen Cart would send that to your browser (let alone twice).

Did your hosts revised security arrangement require any changes to files on your site?

Thanks for the quick reply Kuroi,

When the admin page worked That (Sean||[email protected]) was strung across the screen just above the UID and PWD fields. I thought it was some kind of banner showing who set up the site and dismissed it. But now that I see that text is contained in admin/includes/functions/extra_functions/product_music_functions.php.LCK it seems a bit out of place.

Only change I am aware of to the host was the need to change passwords. On this site I just set up/maintain ZenCart, a cohort is in charge of this main site. He never touches ZenCart and told me nothing else besides the password has changed. I am trying ot remember if during setup I had to specify the site password, but cannot remember.
~Sean

[Sean.Hoffmann]

Do you use Dreamweaver? If so, the following threads may help;

http://www.zen-cart.com/forum/showthread.php?t=68949
https://www.zen-cart.com/forum/showthread.php?p=649087

Cheers
Rod

Thank you Rod, that thread nailed it. Now to find out what I did to upload all of those .LCK. I used to use only HTML-kit and a few months ago started using Dreamweaver. Only thing I can think was that I recently synced the entire store and not just files I was using...

Anyways, I am in thank you all for the help. =)
~Sean

[kuroi]

Beware, you may have other similar files elsewhere. I'd recommend going through all your class folders for example.

[Sean.Hoffmann]

Beware, you may have other similar files elsewhere. I'd recommend going through all your class folders for example.

You are correct Kuroi. Using HTML-Kit they stand out and I am in purging the .LCK's
~Sean

[RodG]

Thank you Rod, that thread nailed it.

Next step. RENAME your /admin/ folder (and ensure the june2009 security patches have been applied).

As much as I hate to say it, within a few minutes this thread will be visible on google, along with the URL to the admin section of your site. You probably have less than an hour before someone attempts to hack you.

Cheers
Rod.

ps. Renaming your admin won't be enough to stop your site being hacked (you need to be fully patched for that), but it WILL prevent the hackers from finding where they need to target their attempts.

[Sean.Hoffmann]

Next step. RENAME your /admin/ folder (and ensure the june2009 security patches have been applied).

As much as I hate to say it, within a few minutes this thread will be visible on google, along with the URL to the admin section of your site. You probably have less than an hour before someone attempts to hack you.

Cheers
Rod.

ps. Renaming your admin won't be enough to stop your site being hacked (you need to be fully patched for that), but it WILL prevent the hackers from finding where they need to target their attempts.

Thank you for the heads up Rod, renamed the folder now looking to ensure it has June 2009 update/patch...