"There was a security error when trying to login" - v1.3.8

[crisand]

Hi,
My hosting company says it is definitely an error at my end.
A friend has been helping and has suggested these things which I have done.
Firstly to download a new version of Zen and give it a name. I did this brought up the new site signed up and then tried to login, with no luck.
I have deleted and then transferred my backup from prior to the error on the following files -
includes/functions/sessions.php
includes/languages/english/login.php
includes/templates/YOUR_TEMPLATE/templates/tpl_login_default.php
includes/templates/YOUR_TEMPLATE/templates/tpl_timeout_default.php
Would you have any other suggestions that might fix this ongoing problem?
My site has not been working for 3 weeks now so I am desperate to get it working, and you guys seem to know more about what to do than MD.
With much thanks once again.

[kuroi]

Hosting companies often say things like this. Many times it just means "I've had a quick look and couldn't see anything obvious at this end". Occasionally they go deeper in which case they will hopefully have provided some explanation as to why they believe that it is definitely a problem at your end, in which case please share that explanation since it may be helpful in diagnosing your problem.

Also, I notice that you haven't answered DrByte's question about the timing of the PHP upgrade to 5.2.5. We're interested in its proximity to the start of these problems.

[Website Rob]

Problem seems to have started when you switched Templates.
What happens when you switch to using the Classic Template?

If all else fails you could make a post in the Commercial Section of the Forum. Usually faster to have an experienced eye have a look at things first-hand, when it comes to solving certain problems such as situations like this.

[crisand]

The PHP version is the same as when I joined, so there was no upgrade.
My template upgrade was done a couple of months before this happening.
I shall phone them tomorrow, emailing is taking way too long with their response at least 48hrs after I send through details.

[ph0ngvu]

For customized templates, all you need to do is add this new Security Feature to 2 files tpl_login_default.php and tpl_time_out_default.php

Find the text "<label class="inputLabel" for="login-password"><?php echo ENTRY_PASSWORD; ?></label>" in both file tpl_login_default.php & tpl_time_out_default.php and add "<?php echo zen_draw_hidden_field('securityToken', $_SESSION['securityToken']); ?>"

below the "<br class="clearBoth" />" (2-3 lines under)

That will do the trick.

[vr_driver]

thankyou! saved my bacon! The security addition worked for me!

[lizgjones]

Hi, I have a very similar problem. After upgrading my customers were unable to log in. However after adding the new security token code to the timeout and login files "<?php echo zen_draw_hidden_field('securityToken', $_SESSION['securityToken']); ?>" it seemed to have worked. However, it only works if the customer logs in before they add an item to the shopping cart. If they log in after (where it shows a different page) they can still log in but it shows a black banner and error symbol where the security log in error used to display! Any ideas? It's great that they can now log in but no customer is going to appreciate what looks like an error come up when they log in the complete a purchase! Please help, the url to my site is as below. Many thanks!

http://www.ethicsandgrace.co.uk/shop...=shopping_cart

[lizgjones]

I forgot to say, if the customer then refreshes the shopping cart page the black error banner disappears! Thanks

[elliesupport]

Hi folks,

I have read the entire thread and done all the changes and I still get this "There was a security error when trying to login." when i log in. As I am using a bought template the errors occurs.

I installed a fresh clean copy of zen 1.3.8a on a testing domain and it all works fine and its on the same server the broken one is on, so its the same version of php etc

Should I now talk to the template company now or ask the hosting company as someone earlier suggested.

Thanks

Ellie

[kuroi]

Hi folks,

I have read the entire thread and done all the changes and I still get this "There was a security error when trying to login." when i log in. As I am using a bought template the errors occurs.

I installed a fresh clean copy of zen 1.3.8a on a testing domain and it all works fine and its on the same server the broken one is on, so its the same version of php etc

Should I now talk to the template company now or ask the hosting company as someone earlier suggested.

Thanks

Ellie

The hosting company won't be able to help you. The template clearly hasn't been written for the current version of Zen Cart. However, this thread should contain all the information that you need to solve the problem, so it's most likely a problem with the way in which you have made the changes, but we'd need more information about your template and how precisely your have made the changes to help your further.