Thread: Security Check

Results 1 to 2 of 2
  1. #1
    Join Date
    Mar 2008
    Posts
    2
    Plugin Contributions
    0

    customer issue Security Check

    This is the warning that i get when I tested my site www.giftcardsale.net . This happened in the checkout process. Any solutions?

    I use a SSL cert, and Linkpoint. My settings are set to suthorize and capture.


    "We have detected that your browser has generated a different SSL Session ID than was used throughout our secure pages.
    Privacy and Security


    We validate the SSL Session ID automatically generated by your browser on every secure page request made to this server.

    This validation assures that it is you who is navigating on this site with your account and not somebody else.
    For security reasons, you will need to logon to your account again to continue shopping online.

    Some browsers, such as Konqueror 3.1, do not have the capability to generate the required secure SSL Session ID automatically. If you use such a browser, we recommend switching to another browser to continue your online shopping with us. If you do not have another browser installed on your computer you can download a compatible one from: Microsoft Internet Explorer, Netscape, or Mozilla.

    We have taken this security measure for your benefit, and apologize for any inconvenience it causes.

    Please contact the store owner if you have any questions relating to this requirement, or to continue purchasing products offline."

  2. #2
    Join Date
    Jan 2004
    Posts
    66,443
    Plugin Contributions
    279

    Default Re: Security Check

    In Admin->Configuration->Sessions, do you have "Check SSL Session ID" set to true? Why?
    The default is false.
    .

    Zen Cart - putting the dream of business ownership within reach of anyone!
    Donate to: DrByte directly or to the Zen Cart team as a whole

    Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
    Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

 

 

Similar Threads

  1. Notice: Check Your Webserver Security Patches
    By DrByte in forum Zen Cart Release Announcements
    Replies: 1
    Last Post: 9 Apr 2014, 07:09 PM
  2. Failing Security Check with Authorize.net (AIM)
    By beilana in forum General Questions
    Replies: 5
    Last Post: 24 Jul 2009, 08:10 AM
  3. Security Double Check?
    By Lafferty Store in forum General Questions
    Replies: 8
    Last Post: 26 Feb 2008, 11:42 PM
  4. Problems with PayPal encripted security check
    By SPotlightjd in forum Built-in Shipping and Payment Modules
    Replies: 3
    Last Post: 12 Apr 2007, 11:38 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
disjunctive-egg