There was a security error when trying to login.

I installed 1.3.8, and then copied over my customized template from a different install of 1.3.8.

Customer logins work properly, but admin cannot login. I get the error:

There was a security error when trying to login.

I have followed the instructions at https://www.zen-cart.com/tutorials/index.php?article=312

First of all, there is not even a "zen_draw_password_field" in /admin/login.php, so it's very unclear from the instructions what should be done with /admin/login.php.

Second, I downloaded a new copy of 1.3.8, and completely replaced /admin/login.php and /includes/functions/sessions.php with fresh copies.

I still am unable to login to the admin area. The login page is located here:
http://99.166.12.61/micro/planktoncart/admin/login.php

Thanks!

Clear your Browser cache or close it entirely then try again.

Rob,
No luck. I even tried it in a different browser to make sure.

Presuming you are using XAMP, have your tried rebooting your computer?

I am not sure what XAMP is. I don't use it. I am running zen cart on a gentoo linux server. The problem persists after a reboot.

XAMP allows one to run a Server on their home computer.

If you switch to the Classic Template and your problem goes away, then you know the problem lies in one of your custom Template files.

I had similar problem when making new test site with 1.3.8

This tutorial solved the problem for me:

https://www.zen-cart.com/tutorials/index.php?article=312

How can I change the template if I cannot log into admin?

Also, socksophoneplayer, as you can see in my original post I followed that tutorial in its entirety before ever posting.

In your Admin config file change the IP address to use your Domain name. As the IP is a Shared one it does not point specifically to your Hosting account.

Speaking of the IP, it would seem it points to 'sbcglobal.net' which to my knowledge, is an ISP. If you are getting your Hosting from them then you might want to ask about a Dedicated IP.

Hi Rob,
Where do I find the Admin config file?

I am hosting on a commercial grade static IP connection.

admin/includes/configure.php

I find your question a bit odd though. It is presumed you did the install of Zen Cart and thus, did the required editing to the two config files which is necessary in order for Zen Cart to even work at all. If someone else did the install then you should chat with them about what they did and where they got the required information from. (database: name, password, username for example)

Rob,
I opened that config file, and the HTTP_SERVER is correctly set as my current domain name. In this thread, I list my site by its IP address rather than its domain name so that this thread won't appear when people google the domain.

In any case, it seems that the current settings are correct. I am the only one who has installed/configured Zen Cart on this server.

where does zen cart log to? is there an option to increase log or error output level?

I am having the same issue, even after following the tutorial on updating the tpl_login_default.php file. I do not have a tpl_timeout_default.php page, however, I am not so sure if it is necessary to login.

I can create a new account, and then I am logged in, however, I cannot log back in once I have logged out.

If anyone does know where Zen Cart puts its log like ahuacatlan asked, please enlighten me.

Thanks,
Cascade Fire

Sorry for the double post, but I can't seem to find a link that would allow for modification of a previously submitted post.

Anyways, after failing the password check through the form on the top of the home page, I was sent to a "Welcome, Please Sign in" page that tells you that me "There was a security error when trying to login." I then attempt to login using the form embedded in the login page, and it fails again, and appears to be going to the same Login page (With the same error message). I try one more time using the form in the page, and it allows me to login.

I am baffled, but am digging through the php and looking for inconsistencies.

Does this method allow you to login ahuacatlan?

admin login does not function at all. customer logins work fine.

I downgraded (well, in retrospect I'd have to say this is an upgrade) to version 1.3.7. Copied over the template directory from my dysfunctional install, and everything is up and running again.

No thanks 1.3.8.