Ajax security fix November 2015

On Applying the Ajax fix for the security update I am now receiving the following error on the Ckeckout page.

"An unknown response null: :text/html; charset=utf-8: :SyntaxError: JSON.parse: unexpected end of data at line 1 column 1 of the JSON data was received while processing an ajax call. The action you requested could not be completed"

every time I complete a step. The error does not stop the processing but you have to click ok to continue. I have reverted back to the previous version.

Any Ideas?

Hi Mark,

Yes, you're right. Ian and I were talking about this earlier and discovered the same. I've posted an updated ajax.php file in the announcement thread.
https://www.zen-cart.com/showthread.php?218914-Security-Patches-for-v1-5-4-November-2015&p=1297794#post1297794

brittainmark:

On Applying the Ajax fix for the security update I am now receiving the following error on the Ckeckout page.

"An unknown response null: :text/html; charset=utf-8: :SyntaxError: JSON.parse: unexpected end of data at line 1 column 1 of the JSON data was received while processing an ajax call. The action you requested could not be completed"

every time I complete a step. The error does not stop the processing but you have to click ok to continue. I have reverted back to the previous version.

Any Ideas?

Ideas that come to mind are the following:

1. Template is not "updated" to ZC 1.5.4 (Does problem persist if temporarily use default ZC template?)
2. There is another "error" occurring that is perhaps logged in the /logs directory.
3. Database is not utf-8/utf8 as applicable/appropriate
4. Language file(s) are not utf-8/utf8 as applicable/appropriate
5. configure.php file(s)are not utf-8/utf8 as applicable/appropriate
6. There is already a problem with the code that is being highlighted by the usage of the correct ajax.php file... Compare files against a known unaltered set to verify that all files are modified only to the extent expected... This includes images and other extraneous files/folders/locations.
7. Javascript error/conflict.
8. SSL certificate issue. (does the same error occur when attempting to login, or go to the contact_us page?) Do you use a SSL certificate? Do you have your site a) partially or b) fully assigned to https or c) not using a SSL nor https:?

More information about your setup would be needed I think to give much else of a suggestion.

Nevermind the above... Apparently between the time that I read the message, went to download/install and test the update, and then post here??? Well DrB posted an updated version... :) So, I've left my "thoughts" above but it appears that the issue has been resolved as reported by the previous message.

Huh.. Although the version I tested was the old version and didn't get an error... But, I also don't have SSL on the test site... So, maybe more to follow...

New ajax file works fine. Thanks for the work and the feedback.

Hi, I was about to apply this fix but cannot find the ajax file on the server.
I am wondering if this file is only an addon in which case I don't want or need to put this file in.
If it is in the standard install please can someone tell me where. Many thanks.

veronicathecow,
If you are using ZenCart v1.5.4 it should be at the root of your shop - if not then if you upgraded you missed something or if not you need to check your distribution files

To clarify Kobra's remarks, if you are not using 1.5.4, this change does not apply.

Hi Kobra and SWguy thanks for your replies.
I am using 1.54 it was upgraded by a professional a while back.
I have now found it in the root of public, thank you I did a search before (using FTP and the Zen Cart tools) and it didn't seem to come up, strange I will look into that later.
I have now updated it, many thanks to you both for your help.

I downloaded and replaced my ajax.php with your file and I still get the same error. Could it be caused by the server setup? We are building a new store and just got our SSL installed an hour ago and I am trying it out for the first time.

It happens wherever I try to click on anything that requires SSL. For example, clicking on Sign In. Could the server guru's have done something wrong? Help.... This is way over my little perl experience head.... :)

bushpilot444:

I downloaded and replaced my ajax.php with your file and I still get the same error. Could it be caused by the server setup? We are building a new store and just got our SSL installed an hour ago and I am trying it out for the first time.

It happens wherever I try to click on anything that requires SSL. For example, clicking on Sign In. Could the server guru's have done something wrong? Help.... This is way over my little perl experience head.... :)

Which ZC version are you running?

Also, can we have a link to the site please?