"There was a security error when trying to login" - v1.3.8

[Merlinpa1969]

we have run 3 seperate upgrades ( all test sites ) with no errors at all

[delia]

Merlin, I'm no newbie. I'm now going to install a brand new 1.37 and then upgrade it to see if I can get one to go smoothly. That's not the problem though. I've got lots of upgrades to do in the near future with my clients and I've got to get a firm grasp on this quickly.

If I simply uploaded the new version over the old and the admin login isn't working, where can the problem be? The functions/sessions.php file and the login files are only 2 files where the changes have been made, correct?

[Kim]

Server configuration? phpInfo?

[delia]

my dedicated server where most of my customer carts are:
http://ddhosting.com/phpinfo.php

[wilt]

For the admin login problem. Can u try a few things.

If u have been using IE as your browser, can u test in Firefox, or check your security settings in IE. Does lowering those settings help.

Whichever browser you use, try clearing both the cookies and the cache, and restarting the browser.

If you have https enabled for admin, try disabling it in configure.php

Ensure the host setting (HTTP_SERVER) in configure.php is actually correct and matches your server's Hostname.

[Nedward]

Wilt, thanks for the assistance.
I've tried in both Firefox and IE and I receive the same error.

I also noticed that if I try to "add to cart", previously i would get errors telling me to fill out my various attributes, now it just says my shopping cart is empty.


I'm still confused what Dr Byte is saying about merging my tpl_login_default.php
I've not changed my template yet, I've stuck with the default and I can't see anything in this file using winmerge that would need merging.
Help please.

Steven

[delia]

I'm still confused what Dr Byte is saying about merging my tpl_login_default.php
I've not changed my template yet, I've stuck with the default and I can't see anything in this file using winmerge that would need merging.
Help please.

Steven

Have you ever created a new template or are you just using the default/classic template the install came with? Had you changed any files before the upgrade?
Install any mods? Did you just upload all the new files to the site or just a few?

If you've not made any changes to the login template and are still using the default template, where did you put the new login template?

It sounds like you haven't uploaded everything to all the right places.

[Nedward]

Hi Delia, it's a complete fresh install using 1.3.8 and I'm using my backed up sql file to populate the database. The only files I've changed are both configure.php files and then changed a few texts to change the "sales message goes here" etc. I haven't touched the template.

Delia quote "If you've not made any changes to the login template and are still using the default template, where did you put the new login template?"

Delia, when you say where did you put it, I didn't put it, I just left it where it was from the copy over of the 1.3.8 files.

thanks for the assistance

Steven

[DrByte]

Nedward,

If you read this thread from the top, including the title, you'll note that my response about the tpl_login_default.php file is related to the "There was a security error when trying to login."

If that's not the problem you're experiencing, I'm not surprised that you're confused by the answers posted.

[Adds]

Nedward,

If you read this thread from the top, including the title, you'll note that my response about the tpl_login_default.php file is related to the "There was a security error when trying to login."

If that's not the problem you're experiencing, I'm not surprised that you're confused by the answers posted.

Just see this:

"There was a security error when trying to login"

--------------------------------------------------------------------------------

Situation:
I have just upgraded and now getting this error when trying to login from the customer screen "There was a security error when trying to login"


Cause:
Zen Cart™ v1.3.8 has an added security feature to prevent spoofed external logins. A "security token" field has been added to all login forms. This token must be current (not expired), and must be submitted with login username+password in order for logins to work properly.


Remedy:
If you have customized template "login" files, the new security features need to be merged into your customized template files.

The following files are affected:
- /includes/templates/YOUR_TEMPLATE/templates/tpl_login_default.php
- /includes/templates/YOUR_TEMPLATE/templates/tpl_timeout_default.php

And if you're encountering it in your Admin area, this file is affected as well:
- /admin/login.php

But what do I need to edit in the above files to get this to work?