Whoops! Your session has expired.

:shocking: I killed it.
Yesterday I installed 2 addons. The first was the About Us page, and the second was the 3 in 1 Captcha addon here.
http://www.zen-cart.com/index.php?main_page=product_contrib_info&products_id=915

The About Us page seemed to work fine.
I backed up all the files (but not the db) before installing Captcha. After I installed the Captcha, I couldn't get it to validate, so I uninstalled it, deleting the old files, and reuploading my backup. I ran the uninstall.sql to finish the installation.

Now, whenever I try to check out, or checkout using paypal, I get the whoops! Your session has expired. Any suggestions as to what may have gone wrong?

www.JS2k.com

Another observation. If I log in, then try to check out, it logs me out with the same message. It seems like a cookie issue, but I'm not sure how an addon or restoring a backup would cause cookie issues.

Okay, did some more research but still no luck. It seems definitely to be an SSL issue because if SSL is disabled, I can checkout.

I messed with some of the settings in Session, but made no difference. I tried both True and False for the following: Force cookie use, Check IP address, and Recreate session.

https://www.zen-cart.com/forum/showthread.php?t=91842
Here's another thread about it, but I'm not sure if there are any real solutions in there.

I had exactly the same issue before, but it was caused by my web hosting company applying suhosin (php security) over my account.

Here's the thread: http://www.zen-cart.com/forum/showthread.php?t=113844

Try installing a fresh zencart on another directory and with SSL, see if it does the same thing.

Thanks! I tried searching, but I guess I didn't think of searching for shopping cart is empty.
I will contact my hosting company.

Please let us know if suhosin was the issue with your host, and if this solved your problem. TIA

Hmm that's odd. I've been talking to support, but all of a sudden it started working again... :onfire:

Goddammit, now it's not working again...

edit: never mind, this time the session really did time out. haha

Well.. the last time i checked your website and attempted to check out, it timed out almost immediately. So you still should check what's going on with both your settings and with the host.

Somehow though, it looks like it's working right now.

There are many good posts in the zen cart forums so I'm sure you'll get the help you need. When you do, make sure to post your config.php (without the username and pass) and the session setting in the backend so people can better assist you.

Good luck YellowStarS2k

Thanks a bunch saitomedia. I'll look into it. I still have a while before it goes live.

Keep a close eye on your hosting provider. If you didn't change anything and your cart suddenly goes haywire, suspect; assuming that you've taken all security measures.

Always backup your working copy (both web contents and database).

That link seems to be a dead one.
@#()$)#(% and again the session is expiring again.

Yep Suhosin was indeed installed. I fiddled around with how to see and edit .htaccess, changed it, and it's working now!
Thanks a ton saitomedia.

Suhosin and its encrypted session.... those hackers got too much time on their hands.

No problem Yellow.. my previous frustration well spent.

YellowStarS2k:

That link seems to be a dead one.
@#()$)#(% and again the session is expiring again.

Sorry.. my link was bad [I was using bb tag]. Here's the working link:

http://www.zen-cart.com/wiki/index.php/Important_Site_Security_Recommendations