"There was a security error when trying to login" - v1.3.8

[DrByte]

FAQ on the "security error when trying to login" issue:
https://www.zen-cart.com/tutorials/i...hp?article=312

[DrByte]

But what do I need to edit in the above files to get this to work?

Just merge all the new changes from the new version of those files into your customized versions of those files.

If you've been doing an upgrade, you're already using some sort of merge/compare tool, right?
Just continue with the rest of your upgrade ... an upgrade doesn't include just updating your "core" files ... you ALSO ALWAYS need to merge all the new changes from the default (template, language, modules, etc) files into your customized versions of those same files. Otherwise you'll be missing features ... such as the one discussed in this thread.

[Adds]

Just see this:

"There was a security error when trying to login"

--------------------------------------------------------------------------------

Situation:
I have just upgraded and now getting this error when trying to login from the customer screen "There was a security error when trying to login"


Cause:
Zen Cart™ v1.3.8 has an added security feature to prevent spoofed external logins. A "security token" field has been added to all login forms. This token must be current (not expired), and must be submitted with login username+password in order for logins to work properly.


Remedy:
If you have customized template "login" files, the new security features need to be merged into your customized template files.

The following files are affected:
- /includes/templates/YOUR_TEMPLATE/templates/tpl_login_default.php
- /includes/templates/YOUR_TEMPLATE/templates/tpl_timeout_default.php

And if you're encountering it in your Admin area, this file is affected as well:
- /admin/login.php

But what do I need to edit in the above files to get this to work?

Issue resolved.

Thanks for the support.

[delia]

My problem turned out to be simple - new computer, new install of ftp client with a setting that I finally discovered did not overwrite many of the files on the server.

Nedward - did you upgrade the database after importing your original sql?

If not, just run the install again to upgrade.

[kuroi]

My problem turned out to be simple - new computer, new install of ftp client with a setting that I finally discovered did not overwrite many of the files on the server.

Could you tell us more about that FTP Client setting. I've had a whole spate of Stock by Attribute users reporting problems that come down to the same issue of files not being over-written by uploads during installation - but I've never actually had this problem myself.

[delia]

I use ws_ftp (ipswitch) pro. Under options / transfers there's a check box for
Don't transfer older/same files when transferring folders. Turns out it was default checked! It's been so long since I installed it that I forgot about that option. Since files transferred to the server show the transfer date that royally made a mess.

However, I just found out that my cart is showing the index page title wrong! Soon as I figure that out I'll let y'all know.

[DrByte]

However, I just found out that my cart is showing the index page title wrong! Soon as I figure that out I'll let y'all know.

Perhaps this issue? http://www.zen-cart.com/forum/showthread.php?t=81766

[kuroi]

I just found out that my cart is showing the index page title wrong! Soon as I figure that out I'll let y'all know.

That's because there's new code to be merged into the meta_tags.php language file ... which is a discussion for another thread.

[delia]

Ah, missed that earlier. Of course! Meta tags changes. Got to imprint that one on my brain.

[DrByte]

Ah, missed that earlier. Of course! Meta tags changes. Got to imprint that one on my brain.

More importantly ... imprint the fact that all upgrades require merging *all* files ... not just core files.
Any override files need to be assessed ... ie: merge new features/entries into your customized files.

Nevertheless, I digress from the topic at hand.