Can't add to cart "Whoops" error

[abcisme]

Can't add to cart. Getting the "Whoops" session time out error. I've been trying to figure this out for hours. I feel like I've tried everything.. hoping someone can help me figure this out.

Version info:

Version ZC 1.5.3
Upgraded on 1/5 from 1.3.9h using official upgrade procedure.
PHP Version: 5.2.17 (Zend: 2.2.0)
Database: MySQL 5.5.40-36.1-log

Session Settings:

Session Directory /home/REMOVED/public_html/REMOVED/cache
Cookie Domain False
Force Cookie Use False
Check SSL Session ID False
Check User Agent False
Check IP Address False
Prevent Spider Sessions True
Recreate Session True
IP to Host Conversion Status true
Keep Vistors Cart True
Days Before Cart Expires 30
Keep Cart Secret Key REMOVED
Use root path for cookie path True
Add period prefix to cookie domain False

(Above settings work properly on my live cart...)

Add-ons installed:

Multilanguage Ezpages
Simple SEO Url
Edit Orders
Ty Package Tracker
Super Orders
Cross Sell
CSS JS Loader
Combination Discounts
Better Together
Fast & Easy Checkout
Image handler
Zen Lightbox
Return Authorization
Testimonials Manager
Sitemap XML
EZ Pages in SiteMap
Google analytics
Print Order Invoice
Keep Cart
Attributes on product listing (I thought for sure it was this, but I rolled back and it wasn't working BEFORE this was installed.. )

DEVSITE LINK

I've tried disabling SSU, Keep cart.. Cleared my browser sessions/cache.. used different browser.. cleared database sessions.. went back to classic template, still not working.

[Ajeh]

If you switch to Classic Template does this work?

[abcisme]

Nope! I feel like I've tried every combo of session settings.. and the above settings work properly on my live cart. I just can't nail down what's going on.

[lat9]

The form on your product_info page(s) doesn't include the securityToken variable, most likely because your Zen Cart v1.3.9 variant of /includes/templates/YOUR_TEMPLATE/tpl_product_info_display.php hard-codes the <form> statement rather than using the Zen Cart zen_draw_form function, which properly appends the hidden variable that contains the securityToken.

If you are receiving the error when you change to the classic template, that says to me that you overwrote the ZC1.5.3 template_default directory with the ZC1.3.9 versions of the files when you performed the upgrade.

[abcisme]

When I'm logged in and try to add to cart, I get a different error:

Whoops! Sorry, but you are not allowed to perform the action requested.
You are still logged in to your account and may continue shopping. Please choose a destination from a menu.

[abcisme]

The form on your product_info page(s) doesn't include the securityToken variable, most likely because your Zen Cart v1.3.9 variant of /includes/templates/YOUR_TEMPLATE/tpl_product_info_display.php hard-codes the <form> statement rather than using the Zen Cart zen_draw_form function, which properly appends the hidden variable that contains the securityToken.

If you are receiving the error when you change to the classic template, that says to me that you overwrote the ZC1.5.3 template_default directory with the ZC1.3.9 versions of the files when you performed the upgrade.

My product info page form start:

<!--bof Form start-->
<?php echo zen_draw_form('cart_quantity', zen_href_link(zen_get_info_page($_GET['products_id']), zen_get_all_get_params(array('action')) . 'action=add_product', $request_type), 'post', 'enctype="multipart/form-data"') . "\n"; ?>
<!--eof Form start-->

My product info page in the default template is exactly as it came from the 1.5.3 package.

[lat9]

OK, check your /includes/functions/html_output.php file; the zen_draw_form function should look like:

/*
 *  Output a form
 */
  function zen_draw_form($name, $action, $method = 'post', $parameters = '') {
    $form = '<form name="' . zen_output_string($name) . '" action="' . zen_output_string($action) . '" method="' . zen_output_string($method) . '"';

    if (zen_not_null($parameters)) $form .= ' ' . $parameters;

    $form .= '>';
    if (strtolower($method) == 'post') $form .= '<input type="hidden" name="securityToken" value="' . $_SESSION['securityToken'] . '" />';
    return $form;
  }

[abcisme]

I COULD KISS YOU! LOL!

I must have screwed that file up when I merged something (who knows what?!) There was a line missing!

/*
 *  Output a form
 */
  function zen_draw_form($name, $action, $method = 'post', $parameters = '') {
    $form = '<form name="' . zen_output_string($name) . '" action="' . zen_output_string($action) . '" method="' . zen_output_string($method) . '"';

    if (zen_not_null($parameters)) $form .= ' ' . $parameters;

    $form .= '>';
   if (strtolower($method) == 'post') $form .= '<input type="hidden" name="securityToken" value="' . $_SESSION['securityToken'] . '" />';
    return $form;
  }

THANK YOU SO MUCH!!! I never would have figured it out on my own.

[lat9]

No problems -- no kissing, either! Since there was at least one line missing from the html_output.php file, I suggest that you use a file-comparison tool like WinMerge or Beyond Compare to see if any other changes were missed!

[abcisme]

Winmerge is what got me into trouble in the first place... LOL! But I will definitely go through and make sure everything is right.

Thanks again!