Preview button doesn't work - can't add products

I moved a site to a PCI compliant hosting company. Customers can buy from the front end, and I log into to the admin, however the following buttons don't work:

• Save button, when creating a new category
• Preview button, when creating a new product
• Preview button, when amending a product
• Update button, when changing status of an order
  Looking around the forum, over aggressive mod_security rules were mentioned, however the host tells me "We do not use mod_security, but we do use Suhosin"

Any idea what it could be? Thanks in advance!

See post #3:

http://www.zen-cart.com/forum/showthread.php?t=120981

I have something similar. I just added the security patch. I since tried to add a new category to my site, but the "save" button doesn't seem to effect the change. Not sure where to start to find the problem here.

Karen - that's one possible symptom of installing the security patch incorrectly. It's possible you installed the files to the cart directories rather than admin.

I wish that were true, I could easily fix it. But I did put the patch files and the one modified file back in the newly renamed admin area. Any other directions you could point me in?

It also may have been nothing to do with the patch. It's just that is the most significant change I have made to the store files other than regular item updates etc. in quite some time.

I can add new products just fine. Only seems to be affecting the new category section. I can do a workaround for now. But there will come a time...

Thank you for responding!

Stevesh - thanks for responding - I've asked the host where php.ini is for me to add

suhosin.session.encrypt = off

Otherwise I checked if I had incorrectly installed the security patch and I had uploaded all files to my admin folder.

The hosting company now says:

"It should not be causing problems. There may be something else that is causing your problem. Have you tried to contact ZenCart to see if they have any solutions or ideas?"

Should I look for another host? Anything else you suggest I try?

dsided:

Should I look for another host?

I'm not sure you have a choice. DrByte says Zencart won't work with
suhosin, and he'd know, so ...

I guess I don't understand why they won't let you turn it off, though.

You might look at the Certified Hosts.

Thanks for the tip. I did a blank install of v1.3.8a/v1.3.8 to a test directory and the buttons work fine(!)

I'm going to try patching to the latest release and see if that still works.

I've now patched to security_patch_v138_20090619 and the buttons DON'T WORK!

I'm going to remove the patch until this is resolved. DrByte what info about my server configuration do you need?

I don't see how the admin security patch would affect that at all.

I've compared the html output of my working zencart with the test zencart with the security patch and may have found the problem.

With the patch installed a big chunks of code is missing, including the form tag! No wonder the button doesn't work.

I assume this patch has been installed on many server successfully, so I wonder what could be causing the code removal on the server? I've asked the hosting company and will report back.

The host is saying "I'm not sure why the security patch would cause this issue, you'll have to contact the developer"

DrByte is there anything I could reply back with?

Do you have any contributions installed, especially contributions that change admin/includes/functions/html_output.php or categories.php.

When you installed the patch, did you just overwrite the old html_output.php or hand edit it.

If you are unsure, attach a (zipped)copy of the html_output.php file to your reply.

Thanks Wilt. I did a fresh install and overwrote the files. I think this is a server issue and have decided to change to Camelot hosting.

As noted in an earlier post, my buttons didn't work after I installed the patch. I checked and rechecked the installation of the patch.

The only solution I found (with the help of the discussions and dsided in particular) was to remove the security patch v138_20090619 and voila! All is working very nicely again.

The version of Zen I am running is 1.3.7.1. ...haven't upgraded to 1.3.8a yet and am now a little hesitant! 1.3.7.1 was a fresh install.

Karen, the 5 patch files must be put in the correct places. If you edit the non-admin version of html_output.php (contrary to the instructions) and don't edit the admin version of the file, then you won't be able to save any changes in your admin.

Entirely unrelated to upgrading.