I updated to Zen Cart v1.3.9d and the error is still pointing to init_sessions.php now on line 42. Unfortunately, I see nothing wrong... no blank spaces and I've deleted the extra lines between coding & that didn't work. (Restored by using back-up files to original 1.3.9d init_sessions.php file.)
Can anyone see where the culprit is?
Many many many thanks in advance.
PS: For reference: Line 42 is "session_set_cookie_params(0, $path, (zen_not_null($cookiedomain) ? '.' . $cookiedomain : ''));"
<?php
ini_set('display_errors',1);
error_reporting(E_ALL);
?>
<?php
/**
* session handling
* see {@link http://www.zen-cart.com/wiki/index.php/Developers_API_Tutorials#InitSystem wikitutorials} for more details.
*
* @package initSystem
* @copyright Copyright 2003-2010 Zen Cart Development Team
* @copyright Portions Copyright 2003 osCommerce
* @license http://www.zen-cart.com/license/2_0.txt GNU Public License V2.0
* @version $Id: init_sessions.php 16258 2010-05-11 09:52:08Z wilt $
*/
if (!defined('IS_ADMIN_FLAG')) {
die('Illegal Access');
}
/**
* sanity check in case zenid has been incorrectly supplied as an htmlencoded param name
*/
if (!isset($_GET['zenid']) && isset($_GET['amp;zenid'])) {
$_GET['zenid'] = $_GET['amp;zenid'];
unset($_GET['amp;zenid']);
}
/**
* require the session handling functions
*/
require(DIR_WS_FUNCTIONS . 'sessions.php');
/**
* set the session name and save path
*/
zen_session_name('zenid');
zen_session_save_path(SESSION_WRITE_DIRECTORY);
/**
* set the session cookie parameters
*/
$path = str_replace('\\', '/', dirname($_SERVER['SCRIPT_NAME']));
$path = (defined('CUSTOM_COOKIE_PATH')) ? CUSTOM_COOKIE_PATH : $path;
session_set_cookie_params(0, $path, (zen_not_null($cookiedomain) ? '.' . $cookiedomain : ''));
/**
* set the session ID if it exists
*/
if (isset($_POST[zen_session_name()])) {
zen_session_id($_POST[zen_session_name()]);
} elseif ( ($request_type == 'SSL') && isset($_GET[zen_session_name()]) ) {
zen_session_id($_GET[zen_session_name()]);
}
/**
* need to tidy up $_SERVER['REMOTE_ADDR'] here beofre we use it any where else
* one problem we don't address here is if $_SERVER['REMOTE_ADDRESS'] is not set to anything at all
*/
$ipAddressArray = explode(',', $_SERVER['REMOTE_ADDR']);
$ipAddress = (sizeof($ipAddressArray) > 0) ? $ipAddressArray[0] : '';
$_SERVER['REMOTE_ADDR'] = $ipAddress;
/**
* start the session
*/
$session_started = false;
if (SESSION_FORCE_COOKIE_USE == 'True') {
zen_setcookie('cookie_test', 'please_accept_for_session', time()+60*60*24*30, '/', (zen_not_null($current_domain) ? $current_domain : ''));
if (isset($_COOKIE['cookie_test'])) {
zen_session_start();
$session_started = true;
}
} elseif (SESSION_BLOCK_SPIDERS == 'True') {
$user_agent = strtolower($_SERVER['HTTP_USER_AGENT']);
$spider_flag = false;
if (zen_not_null($user_agent)) {
$spiders = file(DIR_WS_INCLUDES . 'spiders.txt');
for ($i=0, $n=sizeof($spiders); $i<$n; $i++) {
if (zen_not_null($spiders[$i]) && substr($spiders[$i], 0, 4) != '$Id:') {
if (is_integer(strpos($user_agent, trim($spiders[$i])))) {
$spider_flag = true;
break;
}
}
}
}
if ($spider_flag == false) {
zen_session_start();
$session_started = true;
} else {
if (isset($_GET['zenid']) && $_GET['zenid'] != '') {
$tmp = (isset($_GET['main_page']) && $_GET['main_page'] != '') ? $_GET['main_page'] : FILENAME_DEFAULT;
@header("HTTP/1.1 301 Moved Permanently");
@zen_redirect(@zen_href_link($tmp, @zen_get_all_get_params(array('zenid')), $request_type, FALSE));
unset($tmp);
die();
}
}
} else {
zen_session_start();
$session_started = true;
}
unset($spiders);
/**
* set host_address once per session to reduce load on server
*/
if (!isset($_SESSION['customers_host_address'])) {
if (SESSION_IP_TO_HOST_ADDRESS == 'true') {
$_SESSION['customers_host_address']= @gethostbyaddr($_SERVER['REMOTE_ADDR']);
} else {
$_SESSION['customers_host_address'] = OFFICE_IP_TO_HOST_ADDRESS;
}
}
/**
* verify the ssl_session_id if the feature is enabled
*/
if ( ($request_type == 'SSL') && (SESSION_CHECK_SSL_SESSION_ID == 'True') && (ENABLE_SSL == 'true') && ($session_started == true) ) {
$ssl_session_id = $_SERVER['SSL_SESSION_ID'];
if (!$_SESSION['SSL_SESSION_ID']) {
$_SESSION['SSL_SESSION_ID'] = $ssl_session_id;
}
if ($_SESSION['SSL_SESSION_ID'] != $ssl_session_id) {
zen_session_destroy();
zen_redirect(zen_href_link(FILENAME_SSL_CHECK));
}
}
/**
* verify the browser user agent if the feature is enabled
*/
if (SESSION_CHECK_USER_AGENT == 'True') {
$http_user_agent = $_SERVER['HTTP_USER_AGENT'];
if (!$_SESSION['SESSION_USER_AGENT']) {
$_SESSION['SESSION_USER_AGENT'] = $http_user_agent;
}
if ($_SESSION['SESSION_USER_AGENT'] != $http_user_agent) {
zen_session_destroy();
zen_redirect(zen_href_link(FILENAME_LOGIN));
}
}
/**
* verify the IP address if the feature is enabled
*/
if (SESSION_CHECK_IP_ADDRESS == 'True') {
$ip_address = zen_get_ip_address();
if (!$_SESSION['SESSION_IP_ADDRESS']) {
$_SESSION['SESSION_IP_ADDRESS'] = $ip_address;
}
if ($_SESSION['SESSION_IP_ADDRESS'] != $ip_address) {
zen_session_destroy();
zen_redirect(zen_href_link(FILENAME_LOGIN));
}
}
