Wrong Cache-Control HTTP Response

[andreitero]

Hi, I've recently discovered that the http response for cache-control for my site is "private, max-age=10800, pre-check=10800", where normally it shold be "no-store, no-cache, must-revalidate, post-check=0, pre-check=0". This causes pages to get cached and not updating on refresh, but only when i'm clearing the cache.
For example, new products page does not update after I list a new product on refresh, in fact all the pages do not show any changes untill clearing cache.
Where can i start looking for a solution for this problem? Is it something I have control over, or is it a hosting issue?
Furthermore, I saw some pages with zenid being cached in google when doing a search for: site:lemy.co.uk "zenid". I'm not sure these 2 problems are related, Prevent Spider Sessions in admin is set to True. Site is the first one in my signature, any pointers appreciated!

[andreitero]

Update: After speaking with my hosting company, they said something in my configuration is affectiing that response. They replaced the my index.php to test it and there was no "private, max-age=10800, pre-check=10800" showing up. I have 2 Cache-Control responses now: one is "private, max-age=10800, pre-check=10800" and the other is "max-age=0, no-store"
Now the changes i make in the html are reflecting on refresh, but still, would like to get to the bottom of this.

[kobra]

I would compare the index.php file in question to one from a fresh distribution of the same version

[andreitero]

Thanks, I compared them and they are the same. Replaced mine with an original index.php and web-sniffer.net still shows this:

Status: HTTP/1.1 200 OK  
Date: Sun, 19 Sep 2010 03:39:55 GMT  
Server: Apache/2.2.15 (Unix) mod_ssl/2.2.15 OpenSSL/0.9.8e-fips-rhel5 mod_bwlimited/1.4  
X-Powered-By: PHP/5.2.13  
Expires: Thu, 19 Nov 1981 08:52:00 GMT  
Cache-Control: private, max-age=10800, pre-check=10800  
Set-Cookie: zenid=1cc8241a0860a07be1d798b32274a9d7; path=/; domain=lemy.co.uk  
Last-Modified: Sun, 19 Sep 2010 03:39:32 GMT  
Cache-Control: max-age=0, no-store  
Connection: close  
Transfer-Encoding: chunked  
Content-Type: text/html; charset=utf-8

Also compared application_top.php, which is unchanged.

[barco57]

What is in the .htaccess file for the site?

[andreitero]

Canonical redirects, 404 page, Etags and ip denies, ultimate seo urls:

ErrorDocument 404 /index.php?main_page=page_not_found
FileETag none
RewriteEngine On

# Index Redirect for /index.(html?|php) with no parameters
RewriteCond %{THE_REQUEST} ^[A-Z]{3,9}\ /index\.(html?|php)\ HTTP/
RewriteRule ^index\.(html?|php)$ http://lemy.co.uk/? [R=301,L]

RewriteCond %{THE_REQUEST} ^[A-Z]{3,9}\ /(index.php)?\?ref=nf\ HTTP/
RewriteRule ^(index.php)?$ http://lemy.co.uk/? [R=301,L]

RewriteCond %{THE_REQUEST} ^[A-Z]{3,9}\ /(index.php)?\?source=PrimeSiteUK.com\ HTTP/
RewriteRule ^(index.php)?$ http://lemy.co.uk/? [R=301,L]

RewriteCond %{THE_REQUEST} ^[A-Z]{3,9}\ /(index.php)?\-c-16.html\ HTTP/
RewriteRule ^(index.php)?$ http://lemy.co.uk/women-c-132.html? [R=301,L]
RewriteCond %{THE_REQUEST} ^[A-Z]{3,9}\ /(index.php)?\-c-128_129_162.html\ HTTP/
RewriteRule ^(index.php)?$ http://lemy.co.uk/kids-toys-and-games-c-128_129.html? [R=301,L]
RewriteCond %{THE_REQUEST} ^[A-Z]{3,9}\ /(index.php)?\-c-.html\ HTTP/
RewriteRule ^(index.php)?$ http://lemy.co.uk/footwear-globe-c-64_131.html? [R=301,L]
RewriteCond %{THE_REQUEST} ^[A-Z]{3,9}\ /(index.php)?\-c-13_9_31.html\ HTTP/
RewriteRule ^(index.php)?$ http://lemy.co.uk/bikes-bicycle-accessories-c-13_9.html? [R=301,L]
RewriteCond %{THE_REQUEST} ^[A-Z]{3,9}\ /(index.php)?\-c-13_9_40.html\ HTTP/
RewriteRule ^(index.php)?$ http://lemy.co.uk/bikes-bicycle-accessories-c-13_9.html? [R=301,L]
RewriteCond %{THE_REQUEST} ^[A-Z]{3,9}\ /(index.php)?\-c-13_9_84.html\ HTTP/
RewriteRule ^(index.php)?$ http://lemy.co.uk/bikes-bicycle-accessories-c-13_9.html? [R=301,L]
RewriteCond %{THE_REQUEST} ^[A-Z]{3,9}\ /(index.php)?\-c-9_12.html\ HTTP/
RewriteRule ^(index.php)?$ http://lemy.co.uk/bikes-bicycle-accessories-c-13_9.html? [R=301,L]
RewriteCond %{THE_REQUEST} ^[A-Z]{3,9}\ /(index.php)?\-c-9_28.html\ HTTP/
RewriteRule ^(index.php)?$ http://lemy.co.uk/bikes-bicycle-accessories-c-13_9.html? [R=301,L]
RewriteCond %{THE_REQUEST} ^[A-Z]{3,9}\ /(index.php)?\-m-6.html\ HTTP/
RewriteRule ^(index.php)?$ http://lemy.co.uk/disney-m-5.html? [R=301,L]

# Index Redirect for /(index.php)?main_page=index(&cPath=<blank>) URL
RewriteCond %{THE_REQUEST} ^[A-Z]{3,9}\ /(index\.php)?\?main_page=index(&cPath=)?\ HTTP/
RewriteRule ^(index\.php)?$ http://lemy.co.uk/? [R=301,L]

# Canonical Redirect non-blank, www and/or appended port number to non-www [EXCLUDE /admin requests]
RewriteCond %{HTTP_HOST}   !^(lemy\.co.uk)?$
RewriteCond %{REQUEST_URI} !^/admin [NC]
RewriteRule (.*) http://lemy.co.uk/$1 [R=301,L]

Options +FollowSymLinks
RewriteBase /
# From Ultimate SEO URLs
RewriteRule ^(.*)-p-(.*).html$ index\.php?main_page=product_info&products_id=$2&%{QUERY_STRING} [L]
RewriteRule ^(.*)-c-(.*).html$ index\.php?main_page=index&cPath=$2&%{QUERY_STRING} [L]
RewriteRule ^(.*)-m-([0-9]+).html$ index\.php?main_page=index&manufacturers_id=$2&%{QUERY_STRING} [L]
RewriteRule ^(.*)-pi-([0-9]+).html$ index\.php?main_page=popup_image&pID=$2&%{QUERY_STRING} [L]
RewriteRule ^(.*)-pr-([0-9]+).html$ index\.php?main_page=product_reviews&products_id=$2&%{QUERY_STRING} [L]
RewriteRule ^(.*)-pri-([0-9]+).html$ index\.php?main_page=product_reviews_info&products_id=$2&%{QUERY_STRING} [L]

# For Open Operations Info Manager
RewriteRule ^(.*)-i-([0-9]+).html$ index\.php?main_page=info_manager&pages_id=$2&%{QUERY_STRING} [L]

# For dreamscape's News & Articles Manager
RewriteRule ^news/?$ index\.php?main_page=news&%{QUERY_STRING} [L]
RewriteRule ^news/rss.xml$ index\.php?main_page=news_rss&%{QUERY_STRING} [L]
RewriteRule ^news/archive/?$ index\.php?main_page=news_archive&%{QUERY_STRING} [L]
RewriteRule ^news/([0-9]{4})-([0-9]{2})-([0-9]{2}).html$ index\.php?main_page=news&date=$1-$2-$3&%{QUERY_STRING} [L]
RewriteRule ^news/archive/([0-9]{4})-([0-9]{2}).html$ index\.php?main_page=news_archive&date=$1-$2&%{QUERY_STRING} [L]
RewriteRule ^news/(.*)-a-([0-9]+)-comments.html$ index\.php?main_page=news_comments&article_id=$2&%{QUERY_STRING} [L]
RewriteRule ^news/(.*)-a-([0-9]+).html$ index\.php?main_page=news_article&article_id=$2&%{QUERY_STRING} [L]

# All other pages
# Don't rewrite real files or directories
RewriteCond %{REQUEST_FILENAME} !-f [NC] 
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule ^(.*).html$ index\.php?main_page=$1&%{QUERY_STRING} [L]

order allow,deny
deny from 114.80.93.
deny from 174.129.139.
deny from 75.101.195.
deny from 219.133.48.
deny from 222.76.218.
allow from all

[barco57]

in the developers tool kit, in the admin, goto tools>developers toolkit and goto the bottom input field and enter

header("Cache-Control

select allfiles-catalog/admin and click search.
It will show everywhere in the files that its used.

[andreitero]

Thanks, I've done that, it only shows backup_mysql.php, modules/pages/download/header_php.php, includes/classes/captcha.php, and phplot.php, all of which I checked and are unchanged from the originals.
I'm wondering if caching everything like this is a bad thing, it makes the site much faster. Now the host forced the Cache-Control: max-age=0, no-store, which means nothing is cached, not even css, so browsing the site is slower.
What are the disadvantages of having "private, max-age=10800, pre-check=10800" ?

[DrByte]

I've recently discovered that the http response for cache-control for my site is "private, max-age=10800, pre-check=10800", where normally it shold be "no-store, no-cache, must-revalidate, post-check=0, pre-check=0". This causes pages to get cached and not updating on refresh, but only when i'm clearing the cache.

Zen Cart doesn't set any cache-control responses except for when it serves up downloadable files.
Whatever problem you're having is a result of your server configuration, whether controlled by your hosting company's settings or your own settings (such as .htaccess, php.ini, etc etc etc)