URGENT - Sessions suddenly stopped working.

[royaldave]

Hi

Zencart has (until now) been working fine. Upgraded to 156c months ago.
Suddenly today sessions aren't working correctly. For example you add a product to cart and you get Whoops! Your session has expired.
No changes have been made to code in ages.
I attempted dropping the sessions table and recreating but to no effect.
Any ideas?

[royaldave]

Interestingly the behaviour manifests itself worse in chrome - ie when I add to cart I get the "whoops" message.

In Edge I can add to cart, but upon clicking checkout I get logged out. However I am able to login again and continue to payment..

[royaldave]

http://perth.funkyballoons.com.au if you wish to test for me - perhaps it's only me - however I've had customer complaints.

BTW my template is based on classic green, however I am currently working on a version of classic responsive and the same issues are there too.

[mc12345678]

First thing I see/saw was that in following the above link I was taken to the https: version of the site. Review of the source code identifies that the site setup is to try to direct links to the http: version of the site.

Suggest following this FAQ to set the site to full https: https://www.zen-cart.com/content.php...alled-zen-cart

[royaldave]

Thanks, I did try changing ENABLE_SSL to false without effect. I have now changed this in configure.php to false if you wish to try again, thanks!

[mc12345678]

Thanks, I did try changing ENABLE_SSL to false without effect. I have now changed this in configure.php to false if you wish to try again, thanks!

Actually, because there is some sort of redirect in place to send the visitor (following the above link) to https: then Zen Cart should be set to all https:

The cliff notes to that is in includes/configure.php set HTTP_SERVER and (if not already so) HTTPS_SERVER to each begin with https:. Then also set ENABLE_SSL to true.

define('ENABLE_SSL', 'true');

The visitor is sent to https:, the software should try to send to https so that the communication is all https...

Remember that the above file may be in a read only status and needs to be made writeable to save the changes. But... changing ENABLE_SSL to false doesn't correct the fact that an .htaccess file at the root of the store or above is causing the initial redirect to https:...

Navigating the site, it does appear that it stays non-https until attempting to checkout which at the moment took me to login with the page being https...

Since you have a SSL, should go ahead and use it as described above.