I downloaded fresh Zen Cart files with no addons - version 1.3.8 and can't login to Admin. I've researched FAQ's. I get the following error:

There was a security error when trying to login.

I reviewed the following thread:
https://www.zen-cart.com/tutorials/index.php?article=312

The following code:

<?php echo zen_draw_hidden_field('securityToken', $_SESSION['securityToken']); ?>

appears in the following files:

• /includes/templates/template_default/templates/tpl_login_default.php
• /includes/templates/template_default/templates/tpl_timeout_default.php

Here is a copy of my configuration file without username/passwords:

<?php /** * @package Configuration Settings circa 1.3.8 * @copyright Copyright 2003-2007 Zen Cart Development Team * @copyright Portions Copyright 2003 osCommerce * @license <http://www.zen-cart.com/license/2_0.txt> GNU Public License V2.0 */ /*************** NOTE: This file is similar, but DIFFERENT from the "admin" version of configure.php. ***********/ /*************** The 2 files should be kept separate and not used to overwrite each other. ***********/ // Define the webserver and path parameters // HTTP_SERVER is your Main webserver: eg-http://www.your_domain.com // HTTPS_SERVER is your Secure webserver: eg-https://www.your_domain.com define('HTTP_SERVER', 'http://www.skijunk.com'); define('HTTPS_SERVER', 'https://www.skijunk.com'); // Use secure webserver for checkout procedure? define('ENABLE_SSL', 'true'); define('ENABLE_SSL_CATALOG', 'true'); define('ENABLE_SSL_ADMIN', 'false'); // NOTE: be sure to leave the trailing '/' at the end of these lines if you make changes! // * DIR_WS_* = Webserver directories (virtual/URL) // these paths are relative to top of your webspace ... (ie: under the public_html or httpdocs folder) define('DIR_WS_CATALOG', '/store/'); define('DIR_WS_HTTPS_CATALOG', '/store/'); define('DIR_WS_IMAGES', 'images/'); define('DIR_WS_INCLUDES', 'includes/'); define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/'); define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/'); define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/'); define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/'); define('DIR_WS_DOWNLOAD_PUBLIC', DIR_WS_CATALOG . 'pub/'); define('DIR_WS_TEMPLATES', DIR_WS_INCLUDES . 'templates/'); define('DIR_WS_PHPBB', '/'); // * DIR_FS_* = Filesystem directories (local/physical) //the following path is a COMPLETE path to your Zen Cart files. eg: /var/www/vhost/accountname/public_html/store/ define('DIR_FS_CATALOG', '/var/www/vhosts/skijunk.com/httpdocs/store/'); define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG . 'download/'); define('DIR_FS_DOWNLOAD_PUBLIC', DIR_FS_CATALOG . 'pub/'); define('DIR_WS_UPLOADS', DIR_WS_IMAGES . 'uploads/'); define('DIR_FS_UPLOADS', DIR_FS_CATALOG . DIR_WS_UPLOADS); define('DIR_FS_EMAIL_TEMPLATES', DIR_FS_CATALOG . 'email/'); // define our database connection define('DB_TYPE', 'mysql'); define('DB_PREFIX', ''); define('DB_SERVER', 'localhost'); define('DB_SERVER_USERNAME', 'xxx-xxx'); define('DB_SERVER_PASSWORD', 'xxx-xxx'); define('DB_DATABASE', 'xxx-xxx'); define('USE_PCONNECT', 'false'); define('STORE_SESSIONS', 'db'); // for STORE_SESSIONS, use 'db' for best support, or '' for file-based storage // The next 2 "defines" are for SQL cache support. // For SQL_CACHE_METHOD, you can select from: none, database, or file // If you choose "file", then you need to set the DIR_FS_SQL_CACHE to a directory where your apache // or webserver user has write privileges (chmod 666 or 777). We recommend using the "cache" folder inside the Zen Cart folder // ie: /path/to/your/webspace/public_html/zen/cache -- leave no trailing slash define('SQL_CACHE_METHOD', 'file'); define('DIR_FS_SQL_CACHE', '/var/www/vhosts/skijunk.com/httpdocs/store/cache'); // EOF I edited /admin/includes/configure.php and change ENABLE_SSL_ADMIN to 'false'. I cleared browser cache AND cookies. Cache folder permissions are set to "777". I'm using Firefox browser (latest version) and IE 6 to attempt to login. I've never had issues like this right at the get go. Hard to make any progress when I can't even login to Admin. cheers,

I also discussed login issue with our server admin. PHP Safemode is turned off. I still can't login to Admin.

I setup version 1.38a, Can get into the store.
I cannot login to admin get the following error:

The server encountered an unexpected condition which prevented it from fulfilling the request.
The script had an error or it did not produce any output. If there was an error, you should be able to see it in the error log.
Can any one help with this

Thank You

Robert

Which configure file have you edited?

includes/configure.php ?

You need to be editing/checking the below file if having admin login issues.

admin/includes/configure.php

I will check the file.

Thank You

The file above is - /includes/configure.php

The admin file located at /admin/includes/configure.php follows with username and password x'd out:

<?php /** * @package Configuration Settings circa 1.3.8 * @copyright Copyright 2003-2007 Zen Cart Development Team * @copyright Portions Copyright 2003 osCommerce * @license <http://www.zen-cart.com/license/2_0.txt> GNU Public License V2.0 */ /*************** NOTE: This file is similar, but DIFFERENT from the "store" version of configure.php. ***********/ /*************** The 2 files should be kept separate and not used to overwrite each other. ***********/ // Define the webserver and path parameters // Main webserver: eg-http://www.your_domain.com - // HTTP_SERVER is your Main webserver: eg-http://www.your_domain.com // HTTPS_SERVER is your Secure webserver: eg-https://www.your_domain.com // HTTP_CATALOG_SERVER is your Main webserver: eg-http://www.your_domain.com // HTTPS_CATALOG_SERVER is your Secure webserver: eg-https://www.your_domain.com /* * URLs for your site will be built via: * HTTP_SERVER plus DIR_WS_ADMIN or * HTTPS_SERVER plus DIR_WS_HTTPS_ADMIN or * HTTP_SERVER plus DIR_WS_CATALOG or * HTTPS_SERVER plus DIR_WS_HTTPS_CATALOG * ...depending on your system configuration settings * * If you desire your *entire* admin to be SSL-protected, make sure you use a "https:" URL for all 4 of the following: */ define('HTTP_SERVER', 'http://www.skijunk.com'); define('HTTPS_SERVER', 'https://www.skijunk.com'); define('HTTP_CATALOG_SERVER', 'http://www.skijunk.com'); define('HTTPS_CATALOG_SERVER', 'https://www.skijunk.com'); // Use secure webserver for catalog module and/or admin areas? define('ENABLE_SSL', 'true'); define('ENABLE_SSL_CATALOG', 'true'); define('ENABLE_SSL_ADMIN', 'false'); // NOTE: be sure to leave the trailing '/' at the end of these lines if you make changes! // * DIR_WS_* = Webserver directories (virtual/URL) // these paths are relative to top of your webspace ... (ie: under the public_html or httpdocs folder) define('DIR_WS_ADMIN', '/store/admin/'); define('DIR_WS_CATALOG', '/store/'); define('DIR_WS_HTTPS_ADMIN', '/store/admin/'); define('DIR_WS_HTTPS_CATALOG', '/store/'); define('DIR_WS_IMAGES', 'images/'); define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/'); define('DIR_WS_CATALOG_IMAGES', HTTP_CATALOG_SERVER . DIR_WS_CATALOG . 'images/'); define('DIR_WS_CATALOG_TEMPLATE', HTTP_CATALOG_SERVER . DIR_WS_CATALOG . 'includes/templates/'); define('DIR_WS_INCLUDES', 'includes/'); define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/'); define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/'); define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/'); define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/'); define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/'); define('DIR_WS_CATALOG_LANGUAGES', HTTP_CATALOG_SERVER . DIR_WS_CATALOG . 'includes/languages/'); // * DIR_FS_* = Filesystem directories (local/physical) //the following path is a COMPLETE path to your Zen Cart files. eg: /var/www/vhost/accountname/public_html/store/ define('DIR_FS_ADMIN', '/var/www/vhosts/skijunk.com/httpdocs/store/admin/'); define('DIR_FS_CATALOG', '/var/www/vhosts/skijunk.com/httpdocs/store/'); define('DIR_FS_CATALOG_LANGUAGES', DIR_FS_CATALOG . 'includes/languages/'); define('DIR_FS_CATALOG_IMAGES', DIR_FS_CATALOG . 'images/'); define('DIR_FS_CATALOG_MODULES', DIR_FS_CATALOG . 'includes/modules/'); define('DIR_FS_CATALOG_TEMPLATES', DIR_FS_CATALOG . 'includes/templates/'); define('DIR_FS_BACKUP', DIR_FS_ADMIN . 'backups/'); define('DIR_FS_EMAIL_TEMPLATES', DIR_FS_CATALOG . 'email/'); define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG . 'download/'); // define our database connection define('DB_TYPE', 'mysql'); define('DB_PREFIX', ''); define('DB_SERVER', 'localhost'); define('DB_SERVER_USERNAME', 'xxx-xxx'); define('DB_SERVER_PASSWORD', 'xxx-xxx'); define('DB_DATABASE', 'xxx-xxx'); define('USE_PCONNECT', 'false'); define('STORE_SESSIONS', 'db'); // for STORE_SESSIONS, use 'db' for best support, or '' for file-based storage // The next 2 "defines" are for SQL cache support. // For SQL_CACHE_METHOD, you can select from: none, database, or file // If you choose "file", then you need to set the DIR_FS_SQL_CACHE to a directory where your apache // or webserver user has write privileges (chmod 666 or 777). We recommend using the "cache" folder inside the Zen Cart folder // ie: /path/to/your/webspace/public_html/zen/cache -- leave no trailing slash define('SQL_CACHE_METHOD', 'file'); define('DIR_FS_SQL_CACHE', '/var/www/vhosts/skijunk.com/httpdocs/store/cache'); // EOF

Hi There,

I've been comparing my live working file with yours and there seems to be quite few differences.

This with BOTH configure files.

As your website is new I suggest you delete everything in your store folder.

Login to myPHP Admin and select your database file you created for the shop and DROP all tables.

(Or of not comfortable DROPPING tables delete the database and recreate it.)

Then do a reinstall.

It is likely to take longer to try and work out what the problem than it is to do a fresh install again.

When you do an install there is a page that displays information on PHP and mySQL and what is enabled on the server and so on.

Copy this or take note of what is NOT ticked or working. Just in case you have this problem again.

Also download a FRESH copy of zen cart. I tis likely that something was corrupted. Could have been when you uploaded to website. Use something like filezilla FTP client (FREE). As this is quite a reliable FTP client.

Here is my config file from admin\includes file.
i don't see anything that is a problem, if you do let me know.
I am using the database for two different web stores.
Have the same problem on both stores

Robert

<?php /** * @package Configuration Settings circa 1.3.8 * @copyright Copyright 2003-2007 Zen Cart Development Team * @copyright Portions Copyright 2003 osCommerce * @license <http://www.zen-cart.com/license/2_0.txt> GNU Public License V2.0 */ /*************** NOTE: This file is similar, but DIFFERENT from the "store" version of configure.php. ***********/ /*************** The 2 files should be kept separate and not used to overwrite each other. ***********/ // Define the webserver and path parameters // Main webserver: eg-http://www.your_domain.com - // HTTP_SERVER is your Main webserver: eg-http://www.your_domain.com // HTTPS_SERVER is your Secure webserver: eg-https://www.your_domain.com // HTTP_CATALOG_SERVER is your Main webserver: eg-http://www.your_domain.com // HTTPS_CATALOG_SERVER is your Secure webserver: eg-https://www.your_domain.com /* * URLs for your site will be built via: * HTTP_SERVER plus DIR_WS_ADMIN or * HTTPS_SERVER plus DIR_WS_HTTPS_ADMIN or * HTTP_SERVER plus DIR_WS_CATALOG or * HTTPS_SERVER plus DIR_WS_HTTPS_CATALOG * ...depending on your system configuration settings * * If you desire your *entire* admin to be SSL-protected, make sure you use a "https:" URL for all 4 of the following: */ define('HTTP_SERVER', 'http://www.robarbmarking.com'); define('HTTPS_SERVER', 'https://www.robarbmarking.com'); define('HTTP_CATALOG_SERVER', 'http://www.robarbmarking.com'); define('HTTPS_CATALOG_SERVER', 'https://www.robarbmarking.com'); // Use secure webserver for catalog module and/or admin areas? define('ENABLE_SSL_CATALOG', 'false'); define('ENABLE_SSL_ADMIN', 'false'); // NOTE: be sure to leave the trailing '/' at the end of these lines if you make changes! // * DIR_WS_* = Webserver directories (virtual/URL) // these paths are relative to top of your webspace ... (ie: under the public_html or httpdocs folder) define('DIR_WS_ADMIN', '/catalog/admin/'); define('DIR_WS_CATALOG', '/catalog/'); define('DIR_WS_HTTPS_ADMIN', '/catalog/admin/'); define('DIR_WS_HTTPS_CATALOG', '/catalog/'); define('DIR_WS_IMAGES', 'images/'); define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/'); define('DIR_WS_CATALOG_IMAGES', HTTP_CATALOG_SERVER . DIR_WS_CATALOG . 'images/'); define('DIR_WS_CATALOG_TEMPLATE', HTTP_CATALOG_SERVER . DIR_WS_CATALOG . 'includes/templates/'); define('DIR_WS_INCLUDES', 'includes/'); define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/'); define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/'); define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/'); define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/'); define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/'); define('DIR_WS_CATALOG_LANGUAGES', HTTP_CATALOG_SERVER . DIR_WS_CATALOG . 'includes/languages/'); // * DIR_FS_* = Filesystem directories (local/physical) //the following path is a COMPLETE path to your Zen Cart files. eg: /var/www/vhost/accountname/public_html/store/ define('DIR_FS_ADMIN', '/hermes/bosweb/web294/b2947/d5.robarbma/public_html/catalog/admin/'); define('DIR_FS_CATALOG', '/hermes/bosweb/web294/b2947/d5.robarbma/public_html/catalog/'); define('DIR_FS_CATALOG_LANGUAGES', DIR_FS_CATALOG . 'includes/languages/'); define('DIR_FS_CATALOG_IMAGES', DIR_FS_CATALOG . 'images/'); define('DIR_FS_CATALOG_MODULES', DIR_FS_CATALOG . 'includes/modules/'); define('DIR_FS_CATALOG_TEMPLATES', DIR_FS_CATALOG . 'includes/templates/'); define('DIR_FS_BACKUP', DIR_FS_ADMIN . 'backups/'); define('DIR_FS_EMAIL_TEMPLATES', DIR_FS_CATALOG . 'email/'); define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG . 'download/'); // define our database connection define('DB_TYPE', 'mysql'); define('DB_PREFIX', 'robarb'); define('DB_SERVER', 'robarbma.dot5hostingmysql.com'); define('DB_SERVER_USERNAME', 'xxxxxx'); define('DB_SERVER_PASSWORD', 'xxxxxx'); define('DB_DATABASE', 'zenrobarb'); define('USE_PCONNECT', 'false'); define('STORE_SESSIONS', 'db'); // for STORE_SESSIONS, use 'db' for best support, or '' for file-based storage // The next 2 "defines" are for SQL cache support. // For SQL_CACHE_METHOD, you can select from: none, database, or file // If you choose "file", then you need to set the DIR_FS_SQL_CACHE to a directory where your apache // or webserver user has write privileges (chmod 666 or 777). We recommend using the "cache" folder inside the Zen Cart folder // ie: /path/to/your/webspace/public_html/zen/cache -- leave no trailing slash define('SQL_CACHE_METHOD', 'none'); define('DIR_FS_SQL_CACHE', '/hermes/bosweb/web294/b2947/d5.robarbma/public_html/catalog/cache'); // EOF

Go here and try a few of these options: http://www.zen-cart.com/forum/showthread.php?t=84537

By page 2 gets interesting.

might be simple as removing .htaccess file. (Turn on the view hidden files in your FTP cart if can't see it)

I uploaded zc_install folder setup and ran. Here's what System Inspection shows:

*  Webserver = Apache
* HTTP Host = <https://www.skijunk.com>
* Path_Translated = /var/www/vhosts/skijunk.com/httpdocs/store/zc_install/index.php
* Real Path = /var/www/vhosts/skijunk.com/httpdocs/store
* Server Free Disk Space = 47.35 GB
* PHP O/S = Linux
* PHP API Mode = apache2filter
* PHP Max Execution Time per page = 30
* Register Globals = ON   Click here for more info
* MySQL Support = ON
* MySQL Version = 4.1.21
* PHP Version = 4.3.2
* PHP Safe Mode = OFF
* PHP Sessions Support = ON
* PHP Session.AutoStart = OFF
* PHP session.use_trans_sid = OFF
* Current SQL Cache Folder = /var/www/vhosts/skijunk.com/httpdocs/store/cache  -->Writeable
* Suggested SQL Cache Folder = /var/www/vhosts/skijunk.com/httpdocs/store/cache
* PHP magic_quotes_runtime setting = OFF
* PHP magic_quotes_sybase setting = OFF
* PHP GD Support = ON
* GD Version = GD bundled (2.0.12 compatible)
* PHP ZLIB Compression Support = ON
* PHP OpenSSL Support = ON
* PHP cURL Support = ON
* CURL NON-SSL Capability = Okay
* CURL SSL Capability = Okay
* PHP Upload Support = ON   upload_max_filesize=75M;   post_max_size=75M
* PHP Upload TMP dir =

View PHPINFO for your server
Other System Information (For Reference Only)
The following info does not necessarily indicate any problem or configuration issue. It is simply for the sake of displaying it in an easy-to-find location.

* PHP include_path = .:
* PHP SMTP destination = localhost
* PHP sendmail path = /usr/sbin/sendmail -t -i
* PHP sendmail 'from' = [email protected]
* PHP open_basedir restrictions = /var/www/vhosts/skijunk.com/httpdocs:/tmp
* PHP Output Buffering (gzip) = OFF
* PHP FTP Support = ON
* PHP XML Support = ON
* PHP Session.Save_Path = /var/www/vhosts/skijunk.com/httpdocs/store/cache  -->Writeable

File and Folder Permissions
In order for the installer to store the setup information you provide in the following pages, the configure.php files shown below need to be "writable".

* includes/configure.php = Writeable
* admin/includes/configure.php = Writeable

In order for many Zen Cart™ administrative and day-to-day functions to work properly, You need to mark several files/folders "Writeable". The following is a list of folders which need to be "read-write", along with recommended CHMOD settings. Please correct these settings before continuing installation. Refresh this page in your browser to re-check settings.

Some hosts may not allow you to set CHMOD 777, but only 666. Start with the higher setting first, and switch to lower values if required.

* cache = OK
* images = OK
* includes/languages/english/html_includes = OK
* media = OK
* pub = OK
* admin/backups = OK
* admin/images/graphs = OK

The only errors I see are -

Register Globals = ON - We always kept that setting in past and Zen Cart has always worked with it on.

PHP open_basedir restrictions = /var/www/vhosts/skijunk.com/httpdocs:/tmp

PHP Output Buffering (gzip) = OFF

I've installed and reinstalled both database and zencart installation files several times so reinstall suggestion has already been done.

I've cleared cookies and cache with local browser.

I still can't login to admin and get Security error when attempting to login.

Cheers

Today I uninstalled all files. I deleted old database and created new database. I downloaded 1.3.8a and ran zc_install. Still same issue. I wasn't able to login to Admin.

I was able to resolve issue after many, many hours of research on Zen Cart Forum and Wiki.

I found this info in Wiki:

Turning off "session.use_trans_sid"

Zen Cart uses the PHP "session" infrastructure to handle login security and keep the information for each visitor to your site separate from everyone else.

If the "session.use_trans_sid" setting is enabled on your server, then Zen Cart won't be able to hook into it properly to access its services in a way that lets Zen Cart identify data related to Zen Cart.

As such, it's important that you have this turned off on your site.

If your hosting server's configuration permits this change to work via .htaccess then you may resolve this issue as follows:

In the "root" of your site (ie: where the /index.php and /install.txt are located, create a new file, called .htaccess (or alter the existing one by adding the following to it):

Inside this file, put the following contents:

to turn off session-trans-sid

php_value session.use_trans_sid 0

That resolved issue FINALLY.

Suggestion -

Include .htaccess file in latest package 1.3.8a so others may not experience same issue.

Adding 1 .htaccess file which took less than 2 minutes work resolved issue that I have spent 5-8 hours over 7 day period to troubleshoot. :smile:

Well solution below worked once to be able to login to Admin. Then it quit working. I'm currently talking with Systems admin to see if it is possible to easily turn off "session.use_trans_sid" in php.

Fixed this again. I relooked at configuration files. I ended up using configuration files for an older 1.3.8a install and changing url. I also added .htaccess file to admin directory that I created in an earlier post.

This now brings me up to 10 hours to troubleshoot.

Honestly, this needs to be easier to install and to be able to login to Admin to begin work on shopping cart.

Can someone tell me please new version will bypass issues I experienced. If not, I'll have to switch to another shopping shopping cart application.

I did some work in the admin area. Added products and did some configuration. I log out and now I can' login to ADMIN PANEL.

I clear cookies from browser. Still can't login.

Screw this application.

I read through your later posts and was disappointed to find that you could not find a solution to get Zen Cart working consistently. I think it is either the server settings for the host or .htaccess scripting problem.

Unfortunaltey, not all web hosts provide the ideal environment for Zen Cart to work on their servers.

I suggest in the future that you check with you webhost if they support Zen Cart on their servers.
If they support the current version of Zen Cart.
Ask to see working examples ON the server you are to be hosted on.

Zen Cart is a relatively easy install for most users (Hardest part is probably setting up the database before installing Zen Cart for a novice) providing your hosting environment supports it. So always check before purchasing web hosting that Zen Cart is supported on their servers.

I thought I would give a quick recap of my resolution for admin login described above.

There is a real issue with .htaccess file, need for it in both root of the server and in admin folder and for it to have correct coding so both IE and Firefox and different versions work correctly.

One solution was to add the following code:

to turn off session-trans-sid

php_value session.use_trans_sid 0

That seems to work when trying to admin site in Firefox (latest version).

I had to clear cache and dump cookies and I was still only able to successfuly login with Firefox occassionally.

The package installs with "Recreate Session" under sessions tab in Admin as "True" When I reset it to false the admin login issue has completely disappeared.

In terms of Internet Explorer browser version 8.0 - with or without .htaccess file in place I'm only able to login once and then can never login again. I'm told by my server admin that there is inherent issue with IE8 with cache/cookies. There is a resolution but nobody seems to know exactly what that is.

As far as comment about web hosting services, this application is hosted on my server where we have dozens of other Zen Cart shopping carts for other customers running so we go to any lengths to support Zen Cart application.

The issue was resolved by adding .htaccess file and turning off "Recreate Sessions" in admin section.

To developers of Zen Cart - please consider adding .htaccess files to download with correct coding for IE as well and turn off "Recreate Sessions" in Admin Setup.