customer login problems

[deadeye]

yeah apparently setting that to false makes things work better in my trial version of AOL. i can go view products and see pricing before logging in now, and i can also now sign in...score one for turning recreate sessions to false

Only bad thing about this is that...someone tell me if I'm wrong...is that if someone copies and pastes, or a crawler grabs a URL that has the session id in the code...multiple people could connect at the same time and see some of each others information.

[deadeye]

TheOracle....PMd you the code. Looks strictly HTML to me, but something is causing problems. Maybe it's a certain character combination or something...not really sure. It's easily reproducible to me though. I could check again tomorrow, but I was reproducing the login issue with 2-3 different pieces of HTML affiliate code...where as others were allowing login. Very strange...

[TheOracle]

Thanks for posting the solution on this problem.

[TheOracle]

What the hell ?? I posted a reply on a different topic and it ends up in here ?

[deadeye]

Thanks for specifying that it may be XML parser related. Here....I'll just post the code.

<a href="http://www.tkqlhce.com/click-2005953-10362017?url=http%3A%2F%2Fshop.starwars.com%2Fcatalog%2Fproduct.xml%3Fproduct_sk u%3DSWGGDVCS%26rid%3DCJADPL00001&cjsku=SWGGDVCS" target="_top">
<img src="http://shop.starwars.com/image_file.xml?product_sku=SWGGDVCS&image_type=t" border="0" alt="Exclusive Chrome Plated Darth Vader Statue"/></a>
<img src="http://www.awltovhc.com/image-2005953-10362017" width="1" height="1" border="0"/>

Basically I have some code like this that produces the results...and others that are just slightly different that do not.

This code...same affiliate...does not produce the error.

<a href="http://www.jdoqocy.com/click-2005953-10362017?url=http%3A%2F%2Fshop.starwars.com%2Fcatalog%2Fproduct.xml%3Fproduct_sk u%3DSWHBEUP%26rid%3DCJADPL00001&cjsku=SWHBEUP" target="_top">
<img src="http://shop.starwars.com/image_file.xml?product_sku=SWHBEUP&image_type=t" border="0" alt="Kir Kanos & Mystery Figure Expanded Universe 2-pack"/></a>
<img src="http://www.ftjcfx.com/image-2005953-10362017" width="1" height="1" border="0"/>

[anjordan77]

theoracle...zen is after you...watch out you might end up with a bunch of agent smith's at your house.

[deadeye]

Thanks for specifying that it may be XML parser related. Here....I'll just post the code.

<a href="http://www.tkqlhce.com/click-2005953-10362017?url=http%3A%2F%2Fshop.starwars.com%2Fcatalog%2Fproduct.xml%3Fproduct_sk u%3DSWGGDVCS%26rid%3DCJADPL00001&cjsku=SWGGDVCS" target="_top">
<img src="http://shop.starwars.com/image_file.xml?product_sku=SWGGDVCS&image_type=t" border="0" alt="Exclusive Chrome Plated Darth Vader Statue"/></a>
<img src="http://www.awltovhc.com/image-2005953-10362017" width="1" height="1" border="0"/>

Basically I have some code like this that produces the results...and others that are just slightly different that do not.

This code...same affiliate...does not produce the error.

<a href="http://www.jdoqocy.com/click-2005953-10362017?url=http%3A%2F%2Fshop.starwars.com%2Fcatalog%2Fproduct.xml%3Fproduct_sk u%3DSWHBEUP%26rid%3DCJADPL00001&cjsku=SWHBEUP" target="_top">
<img src="http://shop.starwars.com/image_file.xml?product_sku=SWHBEUP&image_type=t" border="0" alt="Kir Kanos & Mystery Figure Expanded Universe 2-pack"/></a>
<img src="http://www.ftjcfx.com/image-2005953-10362017" width="1" height="1" border="0"/>

Another thing...it only happens when the banner is set to NOT SHOW DURING SSL SESSIONS. So, if I allow the banner during an SSL session...login will work. Any ZC creators know what could be causing this?

[Vger]

The problems with AOL and your cart are caused by AOL and not the cart. It's all down to the stupid way AOL (a.k.a. A O Hell) works.

When someone comes to a page on your site using AOL as their ISP then AOL caches each element of that page on different servers with different ip addresses. So let's say that the page is index.php, which calls in the header, footer, left and right columns, application top and bottom, languages, and multiple image files - they all get cached all over the place at different servers. I have seen AOL, even on a simple html page, recording 18 to 20 separate user sessions in the stats programme. Goodness knows how many user sessions they create for the Zen Cart pages.

The Recreate Session is usually the straw that breaks the camels' back as far as AOL is concerned - just one hurdle too many for it to deal with and it drops the session trail.

Vger

[deadeye]

The problems with AOL and your cart are caused by AOL and not the cart. It's all down to the stupid way AOL (a.k.a. A O Hell) works.

When someone comes to a page on your site using AOL as their ISP then AOL caches each element of that page on different servers with different ip addresses. So let's say that the page is index.php, which calls in the header, footer, left and right columns, application top and bottom, languages, and multiple image files - they all get cached all over the place at different servers. I have seen AOL, even on a simple html page, recording 18 to 20 separate user sessions in the stats programme. Goodness knows how many user sessions they create for the Zen Cart pages.

The Recreate Session is usually the straw that breaks the camels' back as far as AOL is concerned - just one hurdle too many for it to deal with and it drops the session trail.

Vger

Crap...you are right. Those banners were causing me problems. Now I see AOL preventing logins with 'Recreate Session' set to True. This DID NOT happen in 1.2.5, but is occuring now that I'm using 1.3.0.2.

[deadeye]

Ok. What I did to resolve the problem was revert to code from 1.2.5d (because I had it on-hand) for the function zen_session_recreate() in /includes/functions/session.php

Something in the changes for that function are not meshing well. My host is PHP version 5.1.4 (Zend 2.1.0).

I was trying to test changing things in that function, but could never get it to work in all scenarios. Could get it working if I had nothing in my cart when trying to login, but otherwise it's redirect me to the homepage with an empty cart. Then when I could login the item would be in my cart so that part worked. Very strange...maybe something about the 'session_id and session_regenerate_id' call aren't quite working right. Not sure.