Can't login to admin with google-chrome.. works fine on IE!

[DXBLouie]

i had ZC 1.3.9d, and i noticed that when i try to enter my admin area with the correct username and password i got an error saying "There was a security error when trying to login."

i searched around, checked all the obvious, all my templates, etc.. everything is fine!

i figured i'd upgraded to 1.3.9g before posting a question.. and the problem persisted

not sure why i thought of trying to login with ie9 but to my surprise i got logged in right away!
tried again on chrome.. no difference.
i deleted cookies, etc.. still no difference... i can't login to admin area through chrome!

i finally went into admin/login.php and edited it around line 22 as follows:

    if ((!isset($_SESSION['securityToken']) || !isset($_POST['securityToken'])) || ($_SESSION['securityToken'] !== $_POST['securityToken'])) {
      $message = true;
      $pass_message = ERROR_SECURITY_ERROR;
        //DEBUG
        echo "sess - ".$_SESSION['securityToken']."<br>";
        echo "post - ".$_POST['securityToken']."";
    } 

then tried to login to figure out what's going wrong on chrome.
both parameters are set, but their value never matches if i login through chrome for some reason

everytime i hit login, a new session token was generated and the previous session token is shown as the current post token.. so the values never match

i.e: login 1:
sess - f76ced2335ff1c6078fb2bf0d09bd4a5
post - a6bc3e59c9d1b493028b3c37749008a7

login 2:

sess - c1c205b71ae87a370fce114f5d381f4f
post - f76ced2335ff1c6078fb2bf0d09bd4a5

login 3:
sess - 05dc14dce3c20a8e856aeebef8ae4722
post - c1c205b71ae87a370fce114f5d381f4f

and so on..

can anybody make sense of this? i think it's got to do with the session not persisting on form post.. but i'm not sure why this only happens on chrome

[kobra]

can anybody make sense of this? i think it's got to do with the session not persisting on form post.. but i'm not sure why this only happens on chrome

It is a browser setting not a Zencart issue

[DXBLouie]

It is a browser setting not a Zencart issue

I can't seem to find such a setting anywhere on chrome, not to mention that I can login to just about anything, from forums, to mail servers and control panels, etc... This problem only came up with ZC admin panel on google chrome.
I'm not sure I understand what setting could trigger such behavior... Any idea?
Posted via Mobile Device

[kobra]

I would have to get chrome...
Maybe another that has it will respond

[spid3r1987]

i sometimes get that error with firefox, i just click login again and it logs me in :S

will check GC now though

[spid3r1987]

just tried it on my GC, working fine, on 3 different ZC websites... :S

[DXBLouie]

just tried it on my GC, working fine, on 3 different ZC websites... :S

one thing i notice, is when i go to mysite/admin the url automatically changes to mysite/admin/login.php?zenAdminID=g11mc5f87v4fjcqbsu75fcfeq0 (or another token)

only happens on chrome.. not ie

[spid3r1987]

one thing i notice, is when i go to mysite/admin the url automatically changes to mysite/admin/login.php?zenAdminID=g11mc5f87v4fjcqbsu75fcfeq0 (or another token)

only happens on chrome.. not ie

sounds a bit daft, but clear cache etc...
then have another look??
might be that its stored that sess....
mine goes to a zenadmin id aswell.....
try clearing cache and going to admin again....

by clearing my cache and stored username & passwords it removed my zenid...

[DXBLouie]

i already did that on chrome
i even tried the incognito mode, which basically starts with no history, no cookies, no form data or saved password..

same thing.. i hit admin/login.php, i typed the username and password and hit login

the form reloaded with login.php?zenAdminID=q0c55td3hghm0o8n88smoid6p1 in the URL and the debug showed
sess - d5bb2d29e0f2753ab390fb4cb9ffaa82
post - d2ebd39b7347abe301f72ff40079767d

i'm seriously lost here

[DXBLouie]

i've upgraded to 1.3.9h hoping this would solve the problem.. no difference

i figured i'd try a fresh install.. i created a new database, deleted all my browser cookies, installed a fresh copy of zc 1.3.9h and configured it.
same problem!! i can login to admin through ie, while google chrome still shows "There was a security error when trying to login"

i don't get it anymore :S