Security Token

[Leowald]

My site has an html/php front end which connects to zen cart to do the shopping cart stuff.
I have products on my site where when someone clicks "add to cart" it connects them to zencart's add to cart form. This was working for the last few years unitl I now upgraded to 1.5 - it seems to be because there is something extra that is getting passed into the form now. This is the "security token" field.

How do I pass this field as well from my form so that I can continue to submit the way that I have been submitting.

Thanks,

Leora

[DrByte]

Any links in your site which point to the Zen Cart section of your site should direct the customer to the product page or the product-listing page, so that the customer can click Add To Cart from the Zen Cart page, where the security token is properly generated and included in the form.
Anything else will prevent normal operation.

[Leowald]

Thanks for getting back to me - for various reasons, I can't make the product pages zencart pages - only once you click on "add to cart" can I use the zen cart pages.

How does zencart generate this security key - can I just mimic the code on my side before I pass it over?

Thanks,
Leora

[DrByte]

Let me rephrase: make your add-to-cart buttons that exist outside ZC be links to the ZC product page, where the ZC add-to-cart button will be properly shown with all its requirements.

[Leowald]

But then the person will have to click add to cart twice - correct? Is there not another way to add the security token to my pages?

Thanks,
Leora

[DrByte]

Depends whether you change your non-ZC button to read something other than "add to cart".

The security token is tied to the active Zen Cart session. And, since your non-Zen Cart code isn't running Zen Cart and has no Zen Cart session active, you have no ability to insert a security token into your forms.
Zen Cart was designed to BE your product catalog, not be merely a payment collector.

What exactly is it that you're doing that has caused you to relegate ZC to merely a back end payment processing engine?
A link to your site would add some meaningful context to this discussion.