Customers Can't Login

[mistafootball33]

I installed a fresh copy of zen cart 1.3.8 and im having the same issue. Customers cant log in after they leave the page, or want to log back in. I dont know what the issue is. I followed above steps, and still no luck.

The admin login works every time tho.

here is my config.php file on sever.

<?php
/**
* @package Configuration Settings circa 1.3.8
* @copyright Copyright 2003-2007 Zen Cart Development Team
* @copyright Portions Copyright 2003 osCommerce
* @license http://www.zen-cart.com/license/2_0.txt GNU Public License V2.0
*/


/*************** NOTE: This file is similar, but DIFFERENT from the "admin" version of configure.php. ***********/
/*************** The 2 files should be kept separate and not used to overwrite each other. ***********/

// Define the webserver and path parameters
// HTTP_SERVER is your Main webserver: eg-http://www.your_domain.com
// HTTPS_SERVER is your Secure webserver: eg-https://www.your_domain.com
define('HTTP_SERVER', 'http://www.mellsdelicious.com');
define('HTTPS_SERVER', 'https:/');

// Use secure webserver for checkout procedure?
define('ENABLE_SSL', 'false');

// NOTE: be sure to leave the trailing '/' at the end of these lines if you make changes!
// * DIR_WS_* = Webserver directories (virtual/URL)
// these paths are relative to top of your webspace ... (ie: under the public_html or httpdocs folder)
define('DIR_WS_CATALOG', '/');
define('DIR_WS_HTTPS_CATALOG', '/www.mellsdelicious.com/');

define('DIR_WS_IMAGES', 'images/');
define('DIR_WS_INCLUDES', 'includes/');
define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');
define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');
define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');
define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');
define('DIR_WS_DOWNLOAD_PUBLIC', DIR_WS_CATALOG . 'pub/');
define('DIR_WS_TEMPLATES', DIR_WS_INCLUDES . 'templates/');

define('DIR_WS_PHPBB', '/');

// * DIR_FS_* = Filesystem directories (local/physical)
//the following path is a COMPLETE path to your Zen Cart files. eg: /var/www/vhost/accountname/public_html/store/
define('DIR_FS_CATALOG', 'D:/WebRoot/Domains/mellsdelicious.com/wwwroot/');

define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG . 'download/');
define('DIR_FS_DOWNLOAD_PUBLIC', DIR_FS_CATALOG . 'pub/');
define('DIR_WS_UPLOADS', DIR_WS_IMAGES . 'uploads/');
define('DIR_FS_UPLOADS', DIR_FS_CATALOG . DIR_WS_UPLOADS);
define('DIR_FS_EMAIL_TEMPLATES', DIR_FS_CATALOG . 'email/');

// define our database connection
define('DB_TYPE', 'mysql');
define('DB_PREFIX', '');
define('DB_SERVER', '******');
define('DB_SERVER_USERNAME', '******');
define('DB_SERVER_PASSWORD', '******');
define('DB_DATABASE', 'mells');
define('USE_PCONNECT', 'false');
define('STORE_SESSIONS', 'db');
// for STORE_SESSIONS, use 'db' for best support, or '' for file-based storage

// The next 2 "defines" are for SQL cache support.
// For SQL_CACHE_METHOD, you can select from: none, database, or file
// If you choose "file", then you need to set the DIR_FS_SQL_CACHE to a directory where your apache
// or webserver user has write privileges (chmod 666 or 777). We recommend using the "cache" folder inside the Zen Cart folder
// ie: /path/to/your/webspace/public_html/zen/cache -- leave no trailing slash
define('SQL_CACHE_METHOD', 'none');
define('DIR_FS_SQL_CACHE', 'D:/WebRoot/Domains/mellsdelicious.com/wwwroot/cache');

// EOF

[Ajeh]

This appears to be wrong:

define('HTTP_SERVER', 'http://www.mellsdelicious.com');
define('HTTPS_SERVER', 'https:/');

You need to check and see what your valid secure server is ...

This appears to be wrong:

define('DIR_WS_CATALOG', '/');
define('DIR_WS_HTTPS_CATALOG', '/www.mellsdelicious.com/');

This should be:

define('DIR_WS_CATALOG', '/');
define('DIR_WS_HTTPS_CATALOG', '/');

What settings do you have for the Configuration ... Sessions ...

Do you have any issues with the Admin when you login ... logout ... and try to login again?

Can you post, from the server, without your username and password, the file:
/admin/includes/configure.php

[inetmarketing]

Hey,

I'm having the same problem here!

I'm running a new install with Version 1.3.8a

I tried the suggestion in the SESSIONS area, and it doesn't work for me.

I'm getting the error: There was a security error when trying to login.

I just found this article in the FAQ section-

"There was a security error when trying to login"

Situation:
I have just upgraded and now getting this error when trying to login from the customer screen "There was a security error when trying to login"

Cause:
Zen Cart™ v1.3.8 has an added security feature to prevent spoofed external logins. A "security token" field has been added to all login forms. This token must be current (not expired), and must be submitted with login username+password in order for logins to work properly.

Remedy:
If you have customized template "login" files, the new security features need to be merged into your customized template files.

The following files are affected:
- /includes/templates/YOUR_TEMPLATE/templates/tpl_login_default.php
- /includes/templates/YOUR_TEMPLATE/templates/tpl_timeout_default.php

And if you're encountering it in your Admin area, this file is affected as well:
- /admin/login.php

The exact changes needed may vary from release to release, but most likely you will need only add the following after every occurence of the password field (zen_draw_password_field function)
<?php echo zen_draw_hidden_field('securityToken', $_SESSION['securityToken']); ?>


Additionally, if you have customized your /includes/functions/sessions.php file for some reason, you'll also need to merge the new changes for this core file into your customized version.

Link:
https://www.zen-cart.com/tutorials/i...hp?article=312

I don't see a token on my login page! Arrg

Robert

[inetmarketing]

Hey Update,

Token is in fact hidden! I was thinking of a Captcha Image.

I only had to add <?php echo zen_draw_hidden_field('securityToken', $_SESSION['securityToken']); ?> 2 times on my tpl_login_default.php file.

I didn't have a tpl_timeout_default.php file.

I refreshed my log in page, and retried to log in and it worked.

I hope this helps someone else!

Robert

[joefox]

Hey,

I'm having the same problem here!

I'm running a new install with Version 1.3.8a

I tried the suggestion in the SESSIONS area, and it doesn't work for me.

I'm getting the error: There was a security error when trying to login.

I just found this article in the FAQ section-


I don't see a token on my login page! Arrg

Robert

I just tried this and it didnt work...
Also, i found 1 of the files in that location, i cant find the section file listed that needs to be changed.

[inetmarketing]

I just tried this and it didnt work...
Also, i found 1 of the files in that location, i cant find the section file listed that needs to be changed.

Hey!

Are you using a template that you got from a template site?

Or are you referring to the Default template?

Also, did you find the tpl_login_default.php?

Robert

[gineta]

i use also the classic template and all this staff not work
only i get login the admin user

[gineta]

please any help

[greatbig47]

Same problem here...

THe site is here: https://narcolepsynetwork.org/shop/
I'm using Zen Cart 1.3.8a

I'm using the default Template, where I made sure all of the

<?php echo zen_draw_password_field('password', '', zen_set_field_length(TABLE_CUSTOMERS, 'customers_password') . ' id="login-password"'); ?>

Had..

<?php echo zen_draw_hidden_field('securityToken', $_SESSION['securityToken']); ?>

in the files...

• tpl_login_default.php
• tpl_timeout_default.php

My boss sees the "Security Error" and freaks out thinking someone is trying to hack us...

PLease Help... ???

[Ajeh]

Your whole site is secure ... not sure why ...

Currently you are Down for Maintenance so we really cannot test anything ...