There was a security error when trying to login (hosted on NetFirms)

Hello,

I helped a friend setup a zencart store approx 18 months ago and it has all been working fine until she tried to login to her admin earlier this week.

When we enter the username and password, the following message appears:

'There was a security error when trying to login'

She last logged in successfully a couple of months ago and didn't/hasn't made any changes or upgrades.

Because we have not made any changes to prompt the issue, I assumed it was a hosting issue, so I contacted support, however they have said that as it is a 3rd party application it is basically not their problem.

They advised I read the tutorial https://www.zen-cart.com/tutorials/index.php?article=312. I did and have checked the two login files which appear to have the security token script as suggested. I looked at the /admin/login.php file...but to be honest, I am not sure what I am looking for.

the url for the admin is suemartinphotography.com.au/wallart/appadmin which points to suemartinphotography.netfirms.com/suemartinphotography.com.au/wallart/admin/login.php, and the hosting company have said that this gives the following:
PHP Warning: Module 'pdo_mysql' already loaded in Unknown on line 0

I searched for this on the forum, and from what I could understand, it seems to mean that this means there is a duplicate line of code in the php.ini file ...but I cannot find this file anywhere.

I'm afraid I don't have a lot of experience with zencart and only have a basic understanding of php, so I hope I have explained properly and supplied enough information. If anyone could advise what I might be able to try, that would be fantastic.

Tanya

What version of Zen Cart is being used?

Sorry Kim, I'm not 100% sure, I think it is 1.3.8. Is there a way that I can tell other than via the admin?

The site currently uses netfirms shared SSL certificate, would purchasing an SSL certificate for the website help?

the url for the admin is suemartinphotography.com.au/wallart/appadmin which points to suemartinphotography.netfirms.com/suemartinphotography.com.au/wallart/admin/login.php

OUCH !!!

That is one MASSIVELY clunky way of getting to your site (technologially, I mean).

Sounds like netfirms is exactly the type of webhost you (and everyone else) should AVOID.

My advice... (IF YOU CAN...)

Go get the files off the server via FTP.

Go grab the database via the cPanel (then phpMyAdmin).

Load the site onto a new host.

Point the domain (suemartinphotography.com.au) to the name servers of your new host.

Whole procedure can be done in under 90 minutes.

WAVE GOOD RIDDANCE to netfirms...:Flush:

Netfirms made several changes to their server configurations this summer when they changed their servers to be run by Tucows. It's so bad that most shopowners have found it FAR BETTER to switch to another provider altogether.
Those who stay have had to buy dedicated SSL certificates to keep their shops running.

I recommend moving. But, if you are deep into a contract that will cost tens of thousands of dollars to end early, then buy a dedicated SSL. If the cost is just "no-refund", then seriously consider a more traditional host ... it'll be a smart move and money very well spent.

thank you for your replies schoolboy and DrByte, I think moving to a new host is what we will have to do. Are you able to recommend who a 'more traditional host' might be?

There are a few options shown in the "Hosting" link at the top of this page, which you might consider.