Security Error logging into Admin area (on Network Solutions servers)

Gentleman I need a bit of wisdom and assistance please. Using 1.3.9h and its been running just fine for some time now @ cropduster901.com.

Today the owner of the site contacts me and says he cannot log into the admin area with his user/pass. Like a good admin I try my different user/pass and get the same message.
"There was a security error when trying to login"

I come right here to the forum and note the FAQ entry and check all that out, all my template files and login files have the code bit about the session token. Now I have not upgraded so I did not expect that would be the issue. I cleared all my cookies, temp files and such from two different browsers. I have had SSL enabled so I changed my config files to disable SSL, checked all my site paths and values they look fine.

Site is hosted @ network solutions and I am fairly sure they didn't change anything.

What am I missing? Could someone point me in the right direction? Should I clear the sessions table using PHPMYADMIN? Should I add another user manually? What can I do to get around this? Thanks for any help. Quick would be great but I am begging so i dont mind waiting.

Cheers!

Have you checked the error logs in the /cache folder? Even though you don't think it's NS, that would be the first thing I'd suspect.

I have not but will immediately. I did not realize that the cart produced error logs there. Thanks..ill report my findings shortly.

Well the only logs I see relate to an issue with the selected PHP timezone. Could this be my issue? here is the last entry in the last log file.

[01-Mar-2012 15:47:47] PHP Warning: date() [<a href='function.date'>function.date</a>]: It is not safe to rely on the system's timezone settings. You are required to use the date.timezone setting or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected 'America/New_York' for 'EST/-5.0/no DST' instead in /data/16/2 --redacted-- /functions_lookups.php on line 908

I have the same problem and it just happened today. Can someone be a bit more going indepth in solving this problem? I am totally new to this and not very well verse in zencart.

Strange that this started today? Wonder if it has to do with a leap year bug? Can anyone help us? thanks..

Jayster:

Well the only logs I see relate to an issue with the selected PHP timezone. Could this be my issue? here is the last entry in the last log file.

[01-Mar-2012 15:47:47] PHP Warning: date() [<a href='function.date'>function.date</a>]: It is not safe to rely on the system's timezone settings. You are required to use the date.timezone setting or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected 'America/New_York' for 'EST/-5.0/no DST' instead in /data/16/2 --redacted-- /functions_lookups.php on line 908

Yep, that is likely the cause. It is also likely a result of a change NS made to the php.ini file.

can I correct this by adding my own php.ini with that variable defined to the admin folder? i think I read that somewhere.

I am hosted at Network Soluton too. How do we do any of this? I am totally lost. I sent a message to NS asking if they made any chagnes to their web and database servers just now, hoping that they will help and fix the problem. Please help. I am desperate. My site and business depends on it.

Well I tried setting up my own php.ini file in the admin folder and that did not work either. Wasn't sure if I should put the host servers local (america/new york) or the store owners local (callifornia) so I tried BOTH still security error attempting to log in.

Strangly enough, i set up another database and installed the 1.5.0 version and its working just fine. Now to see if I can export the products, customers and settings from the old cart to the new..

any further advice or help would be greatly appreciated. thanks..

BTW NetSol did update their PHP.ini file today. They basically said its our problem. Wonderful folks arent they?

:cry: So that means we are on our own? "Great!" Please keep me up to date on how to solve this. You mention that you installed Zencart 1.50 and it seems to work fine. Does that mean it becomes a new install even if you are able to tranfer the database over to the new site?

where do you find this PHP.ini file? Which folder?

I just can't believe there is not a backdoor method of correcting this situation. Is there NOTHING we can do in the SQL set that would correct this? I am really trying hard to see how this software has value if a simple php.ini change made by our ISP ruins years of work? CAN NO NONE HELP US?:censored:

twi:

where do you find this PHP.ini file? Which folder?

The php.ini file for the server configuration is not normally accessible to the site owner. Only the host can change it. The site owner can setup php.ini files for various things in individual folders. Sometimes this works, sometimes it doesn't. Just depends on how the host has things setup.

I am really trying hard to see how this software has value if a simple php.ini change made by our ISP ruins years of work?

It isn't the software. It's the host making a change in configuration that deviates from standards.

RescoCCC:

It isn't the software. It's the host making a change in configuration that deviates from standards.

So what do you suggest us to do? netsol should be able to resolve this? I sent them two support email and still no reply. i also sent DrByte a private message for hlep and no reply yet.

netsol should be able to resolve this?

They could easily do so.

RescoCCC:

It isn't the software. It's the host making a change in configuration that deviates from standards.

RescoCCC:

They could easily do so.

thank you. but what specifically should i tell to to look for to fix the problem? I am a total newbee in this.

Simply provide them with the specific error message you receive when attempting to login to admin. A host with skilled people would know immediately how to solve the problem.