Error_security_error

[ckosloff]

Hi all,

In my local test site, I updated my 1.3.7.1 admin/login.php to 1.3.8.a.
I wanted to test the admin side and probably made a typo with the password.
Got the above message, but when typing in the right password, still couldn't get in.
I restored from backup and could get back in.
So decided to test on this one file, when inserting the new one I was locked up again.
I checked with WinMerge and yes, there is a new code block by wilt precisely with this error message.
Please help with this, I am stuck on the upgrade process here.
Strange that a mere typo would totally block me off the site.
Thanks.

[DrByte]

You mean this issue? https://www.zen-cart.com/tutorials/i...hp?article=312

[ckosloff]

Thanks for fast reply.
I guess so.
Read the tutorial, but I haven't customized my login files at all, so how do I fix this issue?
Thanks.

[DrByte]

Maybe your PHP sessions aren't working either.
What happens when you add something to the cart? Is it remembered?
Or if you switch languages or currencies? Is it remembered?

[ckosloff]

Doc,

For your information, I am working on a computer with XP SP3 as the OS, XAMPP latest version.
On the test site, I have still the 1.3.7.1 version of admin/login.php, in order to get to the Admin side.
I tested on two test customers and yes, shopping cart remembers products.
Couldn't go much further on the shopping cart because I have already uninstalled all shipping and payment modules in preparation for upgrade.
Cannot switch languages because removed the languages sidebox, maybe later I will install a language pack.
When switching from dollars to Euro, calculations are performed fine.
Now, upon inserting the 1.3.8a version of admin/login.php I get same error message: ERROR_SECURITY_ERROR in the login box.
This is what is set in the if statement of the new code block.
I can get back in, when restoring the old admin/login.php, because this new code block isn't there.
Looking forward eagerly to your response.
Thanks.

[DrByte]

Two things ... if you're literally seeing "ERROR_SECURITY_ERROR" then you've missed updating the language files ... specifically the one that contains the definition for that constant.

Second, if you've missed language files, then maybe you've missed other files as well. There are a number of pieces involved in the security handler for Zen Cart. If you're not upgrading all the files, you're going to get undesired results. Which files did you skip upgrading, and why?

[ckosloff]

I take a very cautious, graded approach to this.
I print out the changelog, update some files and test.
If everything works, I check them and continue, otherwise I stop.
In this case, I stopped.
My extra caution pays off, because I can easily recover from a recent backup, until I find out what is going wrong.
So now that I know, will update all files and check again.
Will be back to you on this thread if problems persist.
Thank you very much.

[ckosloff]

I have now transfered all the changelog version 1.3.8 (since release of v 1.3.7), to my ex-1.3.7.1 test site.
Then moved zc_install folder and attempted database upgrade.
Got three errors:
Skipped: cannot ADD column module_name because it already exists.
Skipped: cannot ADD column module_mode because it already exists.
Skipped: cannot CHANGE column zen_order_id because it does not exist.
Of all three, the latter is the one that worries me most.
How come this column does not exist, if I built this site from scratch on v. 1.3.7.1?
Beats me, please help.
Thanks in advance.

PS. I already checked on security and yes!, I can now login into the Admin side.
Thanks for the tips on this.
Now waiting for response on database upgrade errors.
Rechecking or retrying upgrade was to no avail, I got errors when retrying upgrade.

[chuck]

From my understanding, having read several forum posts about those kinds of messages, those are merely alerts which can generally be ignored.

However, I would double-check one thing first ... did you import your old 1.3.7 database into the database you're using for testing your upgrade? (You said it was your ex 1.3.7.1 site that you had attempted to upgrade before but had problems. If you didn't import the 1.3.7 database again, then you've just upgraded an already-upgraded older old database ... in which case those informational alerts do mean something).
If you "did" reload a copy of your 1.3.7 database onto your new 1.3.8 upgrade database, then those alert messages are probably misnomers.

[ckosloff]

Hi,

Thanks for quick reply.
Answer is yes, I did import the 1.3.7.1 database into the test site, and upgraded that one.
It is now a v.1.3.8a site.
Actually I didn't have problems upgrading, the original issue arose because I stopped the upgrade.
Now the questions:
Maybe the fact that there is no zen_order_id table is because we have not yet taken orders over the Internet?
Or should I just create it and attempt upgrade again?
Also, when hitting the "upgrade database" button again, I got query errors, maybe because I am using mysql5?
Lots of doubts in my mind...
Lastly, I think that I should create a new thread for this, since it is no longer relevant to the security errors that prompted me to start it.
Best regards.