Session Timing out within 2 minutes?

[Jeff_Mash]

HELP! For some reason, all of the sudden it seems, I am getting a TON of customers telling me that they can't check out of the ZenCart store. They log in, add stuff to their shopping cart, but within only a matter of < 1 minute, the session is logged off and they get the time_out page.

MySQL version is 5.1.73.
ZC Version: 1.5.4

I didn't change anything in the ZC sessions configuration, but in case you need it:

Session Directory
/home/domain/public_html/store/cache

Cookie Domain
True

Force Cookie Use
False

Check SSL Session ID
False

Check User Agent
False

Check IP Address
False

Prevent Spider Sessions
True

Recreate Session
False

IP to Host Conversion Status
true

Use root path for cookie path
False

Add period prefix to cookie domain
True

[Jeff_Mash]

I already did an optimize and repair on the zen_sessions table, but that hasn't improved anything.

I am effectively down right now, so any help is greatly appreciated!

[Jeff_Mash]

Oh, and here is my SESSION variables from the server. Anything look goofy?

Attachment 17203

[Jeff_Mash]

So far the way I have reproduced it is to:

1. Log into a customer account
2. Add something to the cart
3. Proceed to the checkout area
4. Usually before I can get to Step 2 in the checkout, the session is expired.

Sometimes it happens later, since I saw a customer get timed out at Step 3.

HELP!

[DrByte]

What's the PHP version? Any changes recently?

[Jeff_Mash]

PHP Version: 5.6.29 (Zend: 2.6.0) ##

The only thing that changed within the last week was that we updated our SSL certificate by renewing it. But by all accounts, that seems fine. Although these timeouts always seem to happen AFTER a customer logs in, or goes through checkout, which would indicate an SSL connection takes place.

Here is an excerpt from the Apache SSL log when it timed me out. It happened right as I tried to confirm the order:

98.255.120.255 - - [04/Aug/2017:18:35:54 -0500] "GET /store/index.php?main_page=checkout_shipping HTTP/1.1" 200 6232 "http://www.mjmmagic.com/store/shopping_cart.html?search_in_description=1&keyword=crimson%2520resurrection&inc_ subcat=0&sort=20a" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.79 Safari/537.36 Edge/14.14393"
98.255.120.255 - - [04/Aug/2017:18:35:57 -0500] "GET /store/images/57343-full.png HTTP/1.1" 200 37238 "https://www.mjmmagic.com/store/index.php?main_page=checkout_shipping" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.79 Safari/537.36 Edge/14.14393"
98.255.120.255 - - [04/Aug/2017:18:35:58 -0500] "GET /images/ddq.jpg HTTP/1.1" 200 31012 "https://www.mjmmagic.com/store/index.php?main_page=checkout_shipping" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.79 Safari/537.36 Edge/14.14393"
98.255.120.255 - - [04/Aug/2017:18:36:01 -0500] "POST /store/index.php?main_page=checkout_shipping HTTP/1.1" 302 20 "https://www.mjmmagic.com/store/index.php?main_page=checkout_shipping" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.79 Safari/537.36 Edge/14.14393"
98.255.120.255 - - [04/Aug/2017:18:36:01 -0500] "GET /store/index.php?main_page=time_out HTTP/1.1" 200 28969 "https://www.mjmmagic.com/store/index.php?main_page=checkout_shipping" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.79 Safari/537.36 Edge/14.14393"

[Jeff_Mash]

If you need to chat with me in real time, I'm live on the website. Just click the green chat bar in the bottom right hand side of the website: http://www.mjmmagic.com

[Jeff_Mash]

A couple of thoughts while I'm going crazy over here:

1. I also don't know if this is related, but lately there have been a TON of users under "Who's Online." Most appear to be bots, but right now, there are 601, and I have seen that number jump up into the 800's recently. Could that also be causing sessions to get all screwy?

2. Do you think I should turn on Force Cookie Use under the Session settings? Never tried that before. But since we recently put a new SSL certificate on the server, I didn't know if that would do anything.

[DrByte]

The site is running a little slowly. Could be you're getting hit with a lot of traffic.

[Jeff_Mash]

UPDATE: It looks like this may be resolved. I just went into Admin->Sessions and I set "Force Cookie Use" to TRUE. Before it was False (and always been False).

I then logged into my customer account and placed a check/money order without any problems.

I then logged into another customer account, on the same computer, and placed another check/money order without any problem.

I want to thank DrByte for helping me out in trying to solve this issue. He went above and beyond to work with me on the issue, even placing test orders in our store to make sure it's working. :)

If I find out anything more, I will update it here in case anyone else experiences the same issue after renewing your SSL certificate.