Blank white screen when checking out in 1.3.8a

Hi Zen Cart,

I'm working on a client's site which is experiencing the dreaded blank white screen when clicking the Checkout Button.

I've tried a number of suggestions read in other forums on this site but nothing has resolved the problem.

Here is some detail about the setup:

Host: Hostgator
Zen Cart version 1.3.8a
PHP 5.2.17
MySQL 5.5.23

My error log indicates the following fatal error, so this is where I would like to start:

[02-Apr-2013 10:12:36] PHP Fatal error:  Call to a member function javascript_validation() on a non-object in /home/mysite/public_html/cart/includes/templates/classic/templates/tpl_checkout_default.php on line 24

Here is the echo statement in the tpl_checkout_default.php file on line 24:

<?php echo $payment_modules->javascript_validation(); ?>

When I'm in the Admin area and I click on Modules/Payment the following message displays above the list of payment modules:

TEXT_CART_EMPTY
1064 You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'SQL_SHOW_SHOPPING_CART_EMPTY' at line 1
in:
[SQL_SHOW_SHOPPING_CART_EMPTY]
If you were entering information, press the BACK button in your browser and re-check the information you had entered to be sure you left no blank fields.

I've attached a screenshot showing the various payment modules, but I don't seem to be able to take any actions to configure them.

What do I need to do to fix this error, please? Hopefully I've included enough info to get me moving with a fix.

Thanks very much,
azurelink

If you go to your Zen Cart Admin to the Modules ... Payment ... and then peek at your /logs directory via FTP and refresh it, do you see any debug logs referencing your Admin?

If so, what do those read?

Zen Cart version 1.3.8a
What do I need to do to fix this error, please?
1.3.8a - Really???

Upgrade on your schedule before you are hacked and have to perform a clean and an upgrade

That v1.3.8 code is approx 6 years old and has known vulnerabilities

Ajeh:

If you go to your Zen Cart Admin to the Modules ... Payment ... and then peek at your /logs directory via FTP and refresh it, do you see any debug logs referencing your Admin?

If so, what do those read?

Thanks for your interest Ajeh,

Here is what is in my log/myDEBUG-adm.....php file:

[02-Apr-2013 11:16:01] PHP Warning:  include(/home/mysite/public_html/cart/includes/languages/english/modules/payment/tpl_shopping_cart_default.php) [<a href='function.include'>function.include</a>]: failed to open stream: No such file or directory in /home/mysite/public_html/cart/secure/modules.php on line 173
[02-Apr-2013 11:16:01] PHP Warning:  include() [<a href='function.include'>function.include</a>]: Failed opening '/home/mysite/public_html/cart/includes/languages/english/modules/payment/tpl_shopping_cart_default.php' for inclusion (include_path='.:/usr/lib/php:/usr/local/lib/php') in /home/mysite/public_html/cart/secure/modules.php on line 173

As these were only warnings and not "fatal errors" I didn't mention them before. The /tpl_shopping_cart_default.php does not exist in that directory path. I tried copying it to that location, but it didn't solve the problem so I deleted it. The only type of files in the payment directory appeared to be payment module files.

Any other thoughts or suggestions?

Thanks,
Azurelink

kobra:

1.3.8a - Really???

Upgrade on your schedule before you are hacked and have to perform a clean and an upgrade

Hi Kobra,

Thanks. Yes, I realize that 1.3.8a is old. I thought there was a patch for the security issue? I just inherited this project and want to start off by fixing the problem. It might well be that upgrading would solve the issues and I may end up doing just that. But for now, I have to pursue a solution to for the current version. (I have made the client aware of the security issues.)

Best,
Azurelink

azurelink:

My error log indicates the following fatal error, so this is where I would like to start:

[02-Apr-2013 10:12:36] PHP Fatal error: Call to a member function javascript_validation() on a non-object in /home/mysite/public_html/cart/includes/templates/classic/templates/tpl_checkout_default.php on line 24

> 
> Here is the echo statement in the tpl_checkout_default.php file on line 24:
> ```
<?php echo $payment_modules->javascript_validation(); ?>
```At the literal level, that's all telling you that whatever payment module you're using doesn't have a javascript_validation function defined in it. So, start there.
Or it means there's a much more serious matter of the /includes/classes/ files being damaged. So, make sure those files match the originals.

> **azurelink:**
>
> When I'm in the Admin area and I click on Modules/Payment the following message displays above the list of payment modules:
> 
> ```
TEXT_CART_EMPTY
1064 You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'SQL_SHOW_SHOPPING_CART_EMPTY' at line 1
in:
[SQL_SHOW_SHOPPING_CART_EMPTY]
If you were entering information, press the BACK button in your browser and re-check the information you had entered to be sure you left no blank fields.

Those TEXT_CART_EMPTY and SQL_SHOW_SHOPPING_CART_EMPTY are placeholder names for constants which have no corresponding define() statement in any of the PHP files.
And that tells me you've got lots of damaged PHP files, not just language files where most defines are done.

azurelink:

I've attached a screenshot showing the various payment modules, but I don't seem to be able to take any actions to configure them.That's a result of PHP errors occurring when the modules are loaded. All modules consist of a minimum of two files: a pair of files by the same name, but one is in the /includes/modules/payment folder and the other is in the /includes/languages/EVERY_LANGUAGE/modules/payment/ folder. The inner content of the files is different, but there must always be a matching pair for EVERY filename that ends in .php in both places. So, don't leave backups in there with a .php on the end of the filename.

Really, your problems are looking a lot more serious than just a couple small errors. You REALLY need to do a COMPLETE site audit and verify that EVERY file is clean and unaltered. It's VERY likely that the site has been hacked because it's using a version that has had known vulnerabilities for MANY YEARS. Simply upgrading would have saved a lot of trouble. But now you need to do a THOROUGH cleanup before you can do an upgrade.
Start here, until you can prove the site has no unauthorized content anywhere, fixing anything bad along the way: http://www.zen-cart.com/wiki/index.php/Recovering_From_Hacks

Hi Dr. Byte,

That was a very helpful response. Thanks! Yes, this site was hacked about a year ago. It was then moved to Hostgator and the malware was apparently cleaned up, though the cart has not worked since then. This is a new client and they are actually considering their options right now.

I was hoping that we could get the site up and running by solving a few simple problems, but I guess not. We'll see.

I'll post here with an update once we've decided what to do.

Thanks very much for your input.

Oh, btw, do you think it would be possible to export the product list even though we're having these problems? Can you recommend a plugin for 1.3.8a? Does Easy Populate export?

Best,
Azurelink

Oh, btw, do you think it would be possible to export the product list even though we're having these problems? Can you recommend a plugin for 1.3.8a?
Import the full db backup to a test upgraded install
Then check check check