URGENT - Sessions suddenly stopped working.

[royaldave]

Hi

Zencart has (until now) been working fine. Upgraded to 156c months ago.
Suddenly today sessions aren't working correctly. For example you add a product to cart and you get Whoops! Your session has expired.
No changes have been made to code in ages.
I attempted dropping the sessions table and recreating but to no effect.
Any ideas?

[royaldave]

Interestingly the behaviour manifests itself worse in chrome - ie when I add to cart I get the "whoops" message.

In Edge I can add to cart, but upon clicking checkout I get logged out. However I am able to login again and continue to payment..

[royaldave]

http://perth.funkyballoons.com.au if you wish to test for me - perhaps it's only me - however I've had customer complaints.

BTW my template is based on classic green, however I am currently working on a version of classic responsive and the same issues are there too.

[mc12345678]

First thing I see/saw was that in following the above link I was taken to the https: version of the site. Review of the source code identifies that the site setup is to try to direct links to the http: version of the site.

Suggest following this FAQ to set the site to full https: https://www.zen-cart.com/content.php...alled-zen-cart

[royaldave]

Thanks, I did try changing ENABLE_SSL to false without effect. I have now changed this in configure.php to false if you wish to try again, thanks!

[mc12345678]

Thanks, I did try changing ENABLE_SSL to false without effect. I have now changed this in configure.php to false if you wish to try again, thanks!

Actually, because there is some sort of redirect in place to send the visitor (following the above link) to https: then Zen Cart should be set to all https:

The cliff notes to that is in includes/configure.php set HTTP_SERVER and (if not already so) HTTPS_SERVER to each begin with https:. Then also set ENABLE_SSL to true.

define('ENABLE_SSL', 'true');

The visitor is sent to https:, the software should try to send to https so that the communication is all https...

Remember that the above file may be in a read only status and needs to be made writeable to save the changes. But... changing ENABLE_SSL to false doesn't correct the fact that an .htaccess file at the root of the store or above is causing the initial redirect to https:...

Navigating the site, it does appear that it stays non-https until attempting to checkout which at the moment took me to login with the page being https...

Since you have a SSL, should go ahead and use it as described above.

[royaldave]

Thanks. I have changed my .htacess - alll https is now http. Still having problems - I did all my testing in incognito mode. I do think my host has changed something - need to work out what it is because my home server works fine with same db and files.

[dbltoe]

http: will soon not be an option for e-commerce. As MC# said, you should set the site to full HTTPS in both configs and keep the redirect to https

[royaldave]

OK, I think it is an SSL issue with my host. Forget some of my earlier comments (I wasn't testing in incognito mode - idiot me!)
With SSL off everything works, turn it on and I get the session issues.
As luck would have it I use multi-site so I can test side-by-side.
perth.funkyballoons.com.au and adelaide.funkyballloons.com.au should be working correctly.
test.funkyballoons.com.au is NOT working correctly.

So if anyone has any suggestions on modifications I should make in cpanel - or some more concrete info to give to their support - much appreciated!

[royaldave]

Anyone have any ideas?

To summarise, everything was ok until a few days ago.

My zencart works fine when using http://

as can be seen with -

http://perth.funkyballoons.com.au

However there are now problems with https://

https://test.funkyballoons.com.au

The wrong behaviour is different according to different browsers.

In Chrome, whenever you add an item to the cart you get the "whoops session expired" message.

In Edge, you can add items to the cart ok, however when you click checkout you get logged out.

Does anyone have any ideas on what has happened to my host for this to occur?