We upgraded from 1.3.8 to 1.3.9f.
For one of our websites have got 3 complaints from different customers stating that they face a ""Login Time Out" problem after they enter their credit card details.

We tested our selves without any issues and also got other orders from this same payment gateway.

However as we got this 3rd similar complaint we have started to look into this.

Probably there could be more complaints and we could be loosing customers.

Anything we could look into ?

Thanks

Harry

What processor/method?
Linux or win server
any other pertinent info

in the admin > tools > version/server info
Look in the php section for what the value is for max_execution_time

Hi Kobra,
We use a custom bank module which processes Visa and Mastercard.

We upgraded to 1.3.9f as well changed servers.

Have been using the same payment module for more than 2 years , also running the same module on other websites without this problem as of now(on the same new server).

Linux server.

What other information can I give ?

We upgraded to 1.3.9f as well changed servers.
Try removing the module from the admin and install it again.
Ajeh explained why somewhere sometime but I do not remember why this sometimes helps after a move

Ok, I did re-intall it, I'll have to wait for the results.
Hope it works :) :)
Thanks

Ok, I did re-intall it, I'll have to wait for the results.
Wait??? Do a test purchase
Why have a customer have issues

As I told you before, it does not happen with everybody, I have to wait and watch.
My transactions do go through.

Did you check your php max_execution_time ?

I will get it checked , how much it should ideally be ?

Long enough that your customers do not have issues????

It's set to 60 on my Zencart and 30 in the main php.ini file on my server.

Should I change anything here ?

harry2cool:

Have been using the same payment module for more than 2 years , also running the same module on other websites without this problem as of now(on the same new server).
What exactly is different in all the files and settings and domain configuration between the site that's allegedly having problems vs those that aren't?

Also, what patterns exist amongst the customers who are having problems? geographic region, browser used, browser settings, cart contents, operating system, dialup vs hi-speed, time of day, using coupons or not, and the list goes on.

Further, if you use a different payment module instead, perhaps one of the built-in ones, does the problem continue? What have you done to ensure that the payment module itself isn't the problem?

Hi DrByte,
To ensure the integrity of the payment gateway, this same module is installed on 2 of my other websites and it works fine.

I did manage to recreate this error.

============================================
If there is an error on the payment gateway (i.e wrong input of any credit card details) , it returns a blank page

Below is the URL which shows the blank page:

'http://www.xyz.com/index.php?main_page=checkout_payment&PaymentID=2894610210902850&auth=&amt=20.0&ref=&tranid=&trackid=4551221862221&postdate=&result=&udf1=50s%20Cotton%20Dress%20Sh&udf2=harryfashion######################&udf3=9821142770&udf4=Rue%20De%20Palace%20New%20York%20New%20York%20100011%20United%20States&udf5=1&error_message=There%20has%20been%20an%20error%20processing%20you%20credit%20card%20at%20yourbank.com,%20please%20try%20again.

The above page should show the checkout_payment page however it shows a blank page, here is where the problem is.

I guess if the above problem is rectified all the problems can solve.

Please let me know what I can test to correct the above.

Your module is using old-style coding that's not compatible with v1.3.9.
It's passing error messages and long parameters on the URL.
You can't pass long error messages via the URL. You should be using the messageStack to do that.
Further, in addition to error messages, any other parameters which have values longer than 43 characters are also treated as spam or attempts at hackers to exploit old vulnerabilities, and are thus met with a 406 error and a blank page.

You need to update your module to work accordingly.

Hi DrByte,
The long url solved the blank page problem, THANKS.

I found out about the "Time Out" issue, it happens when a customer uses Internet Explorer.

FireFox works fine.

I have given the module for testing, any other fix I can use for this ?

Thanks Again

I am harry2cool's developer, we have done some research for "Login Time Out" after back from credit card payment holder.
At last, we find out if the zenid remove from the query string, it will show "Login Time Out" message. I know the zenid use to track login user status. But our other two sites can work after remove zenid parameter.
We have checked codes and site configuration, there are no difference.
Can you help us?

The zenid isn't used only to track login user status.
It's actually the PHP session ID.
Without it, PHP can't link up the customer's session to the software, and that is why it can't track the user's login status.

Basically, you have a PHP sessions problem to fix.

Hi, DrByte

yes, if we remove the zenid from url, the site should be work fine, right?
so our site session has some problem to holder customerid and cart content, right?
I will check site seesion.

Thank you very much!
Jarvis

jarvis_ht2000:

if we remove the zenid from url, the site should be work fine, right?
No, not at all read
DrByte:

Without it, PHP can't link up the customer's session to the software, and that is why it can't track the user's login status.

Yes, I know that.
The zenid can be removed from URL at our two sites, also the sites don't show "Login Out Time" message.
Just one site can not work at this cause. so we very confuse why have these different result, can you give me information for zenid?