There was a security error.....

[jbmoore]

The error:

"There was a security error when trying to login"

Has suddenly appeared during the customer login (Admin not a problem) I have searched these forums and the only hits I found were related to upgrading problems. (This is Not an upgrade). This site was moved some months ago and quite frankly I don't know if our client ever tested it enough to determine if that error has existed since then or before then. Either way I need to find the source of the error.

I have reviewed and done ALL of the suggestions found on this forum thus far. There is a security token field in the login for with a security ID. I have reviewed the code in /includes/modules/pages/login/header.php and can see that, "tokens don't match", is one of the error conditions. I suspect the token is there (it is in the form) but it must not be matching or the $_SESSION['securityToken'] is missing. How does one "reset" this token? (I have cleared the cache and cleared all cookies as a test a number of times, no joy. The cookie tokens match the token in the form.). I have also reviewed the "session" settings in the Admin and don't see anything that would relate to this issue, but maybe I'm misunderstanding the effects of some of those settings. (also the session settings in the php.ini were reviewed) Error was duplicated on IE, Firefox and Safari. Cookies are enable in all cases. (BTW, my company is hosting this site so I have complete control over the php settings, we have a number of other zen cart installs working just fine)

Any suggestions on tracking this down would be appreciated.. I am currently out of fresh ideas..

Thanks.. John..

[kobra]

When you reply scroll up and read pasting tips
Answer the questions/provide the information

[jbmoore]

When you reply scroll up and read pasting tips
Answer the questions/provide the information

I did, and answered all pertinent questions, search the forums, reviewed the FAQs.. (The post asked for the cart version but I see that it did not include that with the post.. It is 1.3.8a)

What is it that you think is missing..?

Thanks.. John...

[lhungil]

You should probably start by upgrading to at least 1.3.9h if not 1.5.x. There are a number of security issues with running old versions of Zen Cart. The older versions were written before the current versions of PHP and MySQL were released and are not as compatible.

[jbmoore]

You should probably start by upgrading to at least 1.3.9h if not 1.5.x. There are a number of security issues with running old versions of Zen Cart. The older versions were written before the current versions of PHP and MySQL were released and are not as compatible.

Good suggestion.. The problem is convincing the client. I was hoping to at least get them working at minimal cost to them and then recommend an upgrade for added security..etc... Do you have any suggestions as to what would cause the "security token" to become "miss matched" and how I might reset that..?

Thanks..