Very Odd Login Issue

[rwoody]

I'm building a new shop with v1.3.8a and I've found after installing the SSL I've got some very strange issues.

First of all I based my template on basically a blank classic template. I've made no changes what so ever to the tpl_login_default or the tpl_timeout_default.php files. They are from the fresh install.

The site is in a sub-directory vs. the root (while under-construction). The config files were originally set at: http: and https://mysite.com vs. http: and https://www.mysite.com - After installing the ssl which is configured for www.mysite.com, I went into both the config files and made the appropriate corrections (not really sure how they were set that way in the first place). After doing that, I cleared my cache and my http authentication on my browser and proceeded to login to the admin using https://www.mysite.com - no joy. I tried resetting the password by doing lost password request. New password did not work. In further testing I realized that i could no long log into the front end of the site either... all very strange.

So I tried a couple of different settings in the config files. Finally I was able to log back in, but only if I reverted back to https://mysite.com (no www). The same holds true with the login into the site itself to check out. Of course now I get the security warning as the SSL as I mentioned is configure for www.mysite.com -

This is the strangest thing I've ever seen. I have about 10 shops running on this server on various releases. This is the first on 1.3.8a. I've have never had this issue arise before.

I do have the fast and easy checkout, but I never get that far if I've have the config settings for www and none of the files mentioned in the forum regarding login security issues are modified by that module. The files modified and in my over-ride folder for that mod are the checkout_confirmation_default.php and the checkout_default.php - but this issue won't let me get beyond the login, so again, I don't believe that is the issue.

If someone could enlighten me I would really be thrilled. Here's a link to the site

The settings are currently set as http://www.mysite.com and https://www.mysite.com within both the catalog and the admin config files and the SSL is enabled.

Any clues anyone can throw my way, I would be very greatful

[schoolboy]

Would you be prepared to post your two configure.php files - after disguising sensitive data (such as dbase login and password)?

[Kim]

Ruth-

There are some similar issues posted recently that an .htaccess fixes.

[rwoody]

Thanks Kim - I'll do a search on .htaccess. I was working on this till the wee hours and I have to tell you, it is absolutely baffling. I had a rewrite setup in htaccess originally that always forced the site to "www", so the first thing I did was remove that, but it made no difference.

I'll report back with my progress.

Thanks again

Ruth

[rwoody]

Would you be prepared to post your two configure.php files - after disguising sensitive data (such as dbase login and password)?

My config files to be honest are set as they are for the other 10 sites on my server - this is definitely an issue specific to 138a - but here you go - I'm getting desperate here. I've used mysite.com to replace my URL. The current setting "break" the login on both the admin and the cart - "if I change" the settings to:
http://mysite.com or to https://mysite.com - the site works perfectly if you don't mind getting an SSL popup! Crazy!!! Also I disabled the SSL to see if possibly there was an issue with my SSL - doesn't matter w/ or w/out - can't login using www.

includes/config settings:

// Define the webserver and path parameters
  // HTTP_SERVER is your Main webserver: eg-http://www.your_domain.com
  // HTTPS_SERVER is your Secure webserver: eg-https://www.your_domain.com
  define('HTTP_SERVER', 'http://www.mysite.com');
  define('HTTPS_SERVER', 'https://www.mysite.com');

  // Use secure webserver for checkout procedure?
  define('ENABLE_SSL', 'true');

// NOTE: be sure to leave the trailing '/' at the end of these lines if you make changes!
// * DIR_WS_* = Webserver directories (virtual/URL)
  // these paths are relative to top of your webspace ... (ie: under the public_html or httpdocs folder)
  define('DIR_WS_CATALOG', '/zen138/');
  define('DIR_WS_HTTPS_CATALOG', '/zen138/');

  define('DIR_WS_IMAGES', 'images/');
  define('DIR_WS_INCLUDES', 'includes/');
  define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');
  define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');
  define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');
  define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');
  define('DIR_WS_DOWNLOAD_PUBLIC', DIR_WS_CATALOG . 'pub/');
  define('DIR_WS_TEMPLATES', DIR_WS_INCLUDES . 'templates/');

  define('DIR_WS_PHPBB', '/');

// * DIR_FS_* = Filesystem directories (local/physical)
  //the following path is a COMPLETE path to your Zen Cart files. eg: /var/www/vhost/accountname/public_html/store/
  define('DIR_FS_CATALOG', '/home/mysite/public_html/zen138/');

  define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG . 'download/');
  define('DIR_FS_DOWNLOAD_PUBLIC', DIR_FS_CATALOG . 'pub/');
  define('DIR_WS_UPLOADS', DIR_WS_IMAGES . 'uploads/');
  define('DIR_FS_UPLOADS', DIR_FS_CATALOG . DIR_WS_UPLOADS);
  define('DIR_FS_EMAIL_TEMPLATES', DIR_FS_CATALOG . 'email/');

// define our database connection
  define('DB_TYPE', 'mysql');
  define('DB_PREFIX', 'zen_');
  define('DB_SERVER', 'localhost');
  define('DB_SERVER_USERNAME', '******_******');
  define('DB_SERVER_PASSWORD', '****');
  define('DB_DATABASE', 'zen138');
  define('USE_PCONNECT', 'true');
  define('STORE_SESSIONS', 'db');
  // for STORE_SESSIONS, use 'db' for best support, or '' for file-based storage

  // The next 2 "defines" are for SQL cache support.
  // For SQL_CACHE_METHOD, you can select from:  none, database, or file
  // If you choose "file", then you need to set the DIR_FS_SQL_CACHE to a directory where your apache 
  // or webserver user has write privileges (chmod 666 or 777). We recommend using the "cache" folder inside the Zen Cart folder
  // ie: /path/to/your/webspace/public_html/zen/cache   -- leave no trailing slash  
  define('SQL_CACHE_METHOD', 'database'); 
  define('DIR_FS_SQL_CACHE', '/home/mysite/public_html/zen138/cache'); 

For my admin/config - the following -

define('HTTP_SERVER', 'http://www.mysite.com');
  define('HTTPS_SERVER', 'https://www.mysite.com');
  define('HTTP_CATALOG_SERVER', 'http://www.mysite.com');
  define('HTTPS_CATALOG_SERVER', 'https://www.mysite.com');

  // Use secure webserver for catalog module and/or admin areas?
  define('ENABLE_SSL_CATALOG', 'false');
  define('ENABLE_SSL_ADMIN', 'true');

// NOTE: be sure to leave the trailing '/' at the end of these lines if you make changes!
// * DIR_WS_* = Webserver directories (virtual/URL)
  // these paths are relative to top of your webspace ... (ie: under the public_html or httpdocs folder)
  define('DIR_WS_ADMIN', '/zen138/admin/');
  define('DIR_WS_CATALOG', '/zen138/');
  define('DIR_WS_HTTPS_ADMIN', '/zen138/admin/');
  define('DIR_WS_HTTPS_CATALOG', '/zen138/');

  define('DIR_WS_IMAGES', 'images/');
  define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');
  define('DIR_WS_CATALOG_IMAGES', HTTP_CATALOG_SERVER . DIR_WS_CATALOG . 'images/');
  define('DIR_WS_CATALOG_TEMPLATE', HTTP_CATALOG_SERVER . DIR_WS_CATALOG . 'includes/templates/');
  define('DIR_WS_INCLUDES', 'includes/');
  define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');
  define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');
  define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');
  define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');
  define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');
  define('DIR_WS_CATALOG_LANGUAGES', HTTP_CATALOG_SERVER . DIR_WS_CATALOG . 'includes/languages/');

// * DIR_FS_* = Filesystem directories (local/physical)
  //the following path is a COMPLETE path to your Zen Cart files. eg: /var/www/vhost/accountname/public_html/store/
  define('DIR_FS_ADMIN', '/home/mysite/public_html/zen138/admin/');
  define('DIR_FS_CATALOG', '/home/mysiote/public_html/zen138/');

  define('DIR_FS_CATALOG_LANGUAGES', DIR_FS_CATALOG . 'includes/languages/');
  define('DIR_FS_CATALOG_IMAGES', DIR_FS_CATALOG . 'images/');
  define('DIR_FS_CATALOG_MODULES', DIR_FS_CATALOG . 'includes/modules/');
  define('DIR_FS_CATALOG_TEMPLATES', DIR_FS_CATALOG . 'includes/templates/');
  define('DIR_FS_BACKUP', DIR_FS_ADMIN . 'backups/');
  define('DIR_FS_EMAIL_TEMPLATES', DIR_FS_CATALOG . 'email/');
  define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG . 'download/');

// define our database connection
  define('DB_TYPE', 'mysql');
  define('DB_PREFIX', 'zen_');
  define('DB_SERVER', 'localhost');
  define('DB_SERVER_USERNAME', '*****');
  define('DB_SERVER_PASSWORD', '*****');
  define('DB_DATABASE', 'zen138');
  define('USE_PCONNECT', 'true');
  define('STORE_SESSIONS', 'db');
  // for STORE_SESSIONS, use 'db' for best support, or '' for file-based storage

  // The next 2 "defines" are for SQL cache support.
  // For SQL_CACHE_METHOD, you can select from:  none, database, or file
  // If you choose "file", then you need to set the DIR_FS_SQL_CACHE to a directory where your apache 
  // or webserver user has write privileges (chmod 666 or 777). We recommend using the "cache" folder inside the Zen Cart folder
  // ie: /path/to/your/webspace/public_html/zen/cache   -- leave no trailing slash  
  define('SQL_CACHE_METHOD', 'database'); 
  define('DIR_FS_SQL_CACHE', '/home/mysite/public_html/zen138/cache'); 

Really need to figure out this mystery!!!

Oh... Kim, I searched all the way back to Dec and couldn't find the post you referenced - possibly you could point? I did disable all my .htaccess files... remember this is my server so no evil admin during the night change the settings.. we are not php5 yet either.. waiting to move to that.

[rwoody]

Fixed it!!!!

By reading a ton of posts and trying everything under the sun - I found that by turning off " Recreate Session", the problem vanishes!!

Now I'm not sure what that is all about... but I can now login to the front and into the admin for those of you struggling here. Maybe someone can enlighten me as to why this is creating a problem both with the admin and the cart logins.

Either way... it's now working...Thank Gosh!!!!

[Cindyrelly]

Fixed it!!!!

By reading a ton of posts and trying everything under the sun - I found that by turning off " Recreate Session", the problem vanishes!!

Now I'm not sure what that is all about... but I can now login to the front and into the admin for those of you struggling here. Maybe someone can enlighten me as to why this is creating a problem both with the admin and the cart logins.

Either way... it's now working...Thank Gosh!!!!

Where do you "Turn-Off" the Recreate Session? Maybe this is my prob. too and I am anxious to try!

[Cindyrelly]

Where do you "Turn-Off" the Recreate Session? Maybe this is my prob. too and I am anxious to try!

Oh, I found where to set that to False but it didn't resolve my problem! I wonder if the message, "There was a security error when trying to login." has anything to do with the fact that there doesn't appear to be any SSL going on? There is no https or Lock Icon. I don't know anything about SSL but I know I don't see any of that when checking out!

[realforever]

My website 1.3.8a has SSL installed and https going and having the same issue even after turned off the session recreate.