Developer Tools Error Message Every Time

ZC 1.5.5e on PHP 7. I have just added Ultimate SEO Urls and Colorbox mods. Working on the next I find out that Developers Tools is no longer working. I am now getting an error message at the top of the dev tools admin page "Error*:** No Configuration Key or Text was entered to search for ... Search was terminated"
*No matter what I search for... even searching for "zen-cart" in any of the search fields I get this message.
What's going on here?

Thank you,
John

Hard to say how to approach, USU affects uris, colorbox should have no impact on the admin side when installed as expected other than to execute the installer code. Improper installation of either could cause a problem, though it seems more like there is possibly a sanitization issue occurring when posting the developer's toolkit information that is causing all of the entered content to be sanitized out/removed. I might actually suggest starting with activating the debug for admin/includes/classes/AdminRequestSanitizer.php to see what is happening with the data that is posted (assuming that it makes it there) and then try to figure out what changes were made to "get things to work" to ensure the correct fix was applied to the correct area.

To enable the logging, suggest temporarily adding a file to the admin/includes/extra_datafiles folder that has this content in it:

<?php define('DO_DEBUG_SANITIZATION', 'true');

Then attempt to search again from within the developer tool kit and look in the logs directory for the most recent file that was generated related to sanitization and review/post the results. Should see a sort of input set of post data which should contain your search criteria and then an output section to show what was done with the sanitization. If not then, certainly seems like more investigation is necessary to resolve the issue(s).

This is out of control. I'm really not such a noob. I can normally get this stuff hashed out... I can't log into the admin now. I have no failed attempts being logged in the admin table in the database either. I've put up a fresh /admin/ directory and added the correct /admin/includes/configure.php file for the database I'm working with. ... nothing... can't get it send me a new password either.

I forgot. I have also installed USU (https://www.zen-cart.com/downloads.php?do=file&id=132). I just found out that I can also no log into customer accounts on the front end either. Getting the message that the email doesn't exist.

it's the htaccess file causing all of these issues. now I just need to figure out why. Sorry I forgot to mention USU. Thanks for the help.

John

in my htaccess - this is what's causing the problem. I just don't know why...

RewriteCond %{HTTP_HOST} ^domain.com$ [NC]
RewriteRule ^(.*)$ http://www.domain.com/$1 [R=301,L]

RewriteCond %{HTTP_HOST} !^www\.
RewriteRule ^(.*)$ http://www.%{HTTP_HOST}/$1 [R=301,L]

Removing these entries and everything works well. Adding either of these two entries and the above mentioned problems re-emerge.

Thank You,
John

And in your includes/configure.php or admin/includes/configure.php, settings related to HTTP_SERVER, HTTPS_SERVER, ENABLE_SSL, etc???

Also, where in the htaccess file are those rules applied? I thought USU "instruction" identified the recommended location for such information.

The rules in the htaccess file are at the top just below
Options +FollowSymLinks
RewriteEngine On
RewriteBase /

Removing them allows the site to be accessed with or without www, but zc adds www to all links which creates duplicate content.

in admin configure
define('HTTP_CATALOG_SERVER', 'http://www.domain.com');
define('HTTPS_CATALOG_SERVER', 'https://www.domain.com');
ENABLE_SSL is false for time being

in front end
define('HTTP_SERVER', 'http://www.domain.com');
define('HTTPS_SERVER', 'https://www.domain.com');
ENABLE_SSL is false for time being

ZC 1.5.5 admin has one additional server define. Is it http: or https:?

Also say that ENABLE_SSL is false "for now" does that mean that there is a SSL cert installed and/or the system is capable of handling SSL, but for now it is disabled?

It may be a server configuration issue which since those two rewrites force http: would/could cause an infinite redirect because ZC could be picking up that the request is being made for https: but the htaccess is redirecting back to http, etc...

The admin/includes/configure.php also includes
define('HTTP_SERVER', 'http://domain.com');

There is no cert installed on the domain where I'm developing the new site. The htaccess file is a copy of the htaccess file currently being used by the live site (zc 1.5.1) on the same server which also uses USU.

This is what I get using the htaccess rules

and this is what I get without the htaccess rules

Ok, so said 2 sites, one server. How in the file structure are the two sites "related"?

Other than they're both zen carts one (the live one) being 1.5.1 and the new one being 1.5.5 they aren't related. They're both on the same server and both using USU with identical htaccess files.

bumba000:

Other than they're both zen carts one (the live one) being 1.5.1 and the new one being 1.5.5 they aren't related. They're both on the same server and both using USU with identical htaccess files.
So neither one is within the other. Is there an htaccess in the folder above (more to the left in the path listing) the folder that contains the current problem server?

What redirects may already be established via cPanel fo this test domain?

And in your browser when you don't have the htaccess in place, what does the uri show?

There appears to be something that is holding the line at not having/using a www. prefix....

bumba000:

The rules in the htaccess file are at the top just below
Options +FollowSymLinks
RewriteEngine On
RewriteBase /

Removing them allows the site to be accessed with or without www, but zc adds www to all links which creates duplicate content.

in admin configure
define('HTTP_CATALOG_SERVER', 'http://www.domain.com');
define('HTTPS_CATALOG_SERVER', 'https://www.domain.com');
ENABLE_SSL is false for time being

in front end
define('HTTP_SERVER', 'http://www.domain.com');
define('HTTPS_SERVER', 'https://www.domain.com');
ENABLE_SSL is false for time being

this is wrong. not sure if this is related to your problem or not. the admin configure on v1.5.1 is different from v1.5.5. (not sure about the customer side, but you can look for yourself.) here is the admin configure file:

https://github.com/zencart/zencart/blob/v155/admin/includes/dist-configure.php

best.

Hey Carl,
I know they're different. I have the 1.5.5 configs on the 1.5.5 install. The file I copied over was the htaccess. My admin config file says 1.5.5 at the top and is identical to the one you linked to.

Thank You,
John

MC,
The dev site is installed in the root (public_html). There is no htaccess above this dir. There are no redirects added via cpanel.

bumba000:

MC,
The dev site is installed in the root (public_html). There is no htaccess above this dir. There are no redirects added via cpanel.

What are the contents of the admin/includes/local directory and file(s) within?

BTW, as a little "test" myself. I took a site that I don't typically use www. as a prefix for, I have no .htaccess file in the root and have not done anything with the admin .htaccess to force one way or another and modified the three admin HTTP_ defines to include www. (First test was with just HTTP_SERVER). Attempted to access the admin, got results similar to what you have described about correct credentials being provided, POST went to www. but GET went to site without www. and remaining calls all went to site without www. Now I haven't gone looking for a few other things like, I do have an SSL and it is enabled and as far as controlling the domain further, I had a setting in place to force removal of www which would explain my observation but I have only dug so far and haven't disabled SSL from the admin for this site. I'm quite certain though if I added an .htaccess rewrite rule to force www. that issues would continue further.

All that being said, it seems to me that there is something on the server side that is basically prohibiting the use of www. on this test site and it is not ZC related...

Something I noticed though with my testing, was that when admin/includes/configure.php HTTP_SERVER included www., then my post for access went to www. while my GET went to the site without www and all further communication went without www. Your POST above showing the traffic flow doesn't attempt to go to the site with www., but the get did (.htaccess redirect) that was then taken back to without www.

Have you verified permissions on your admin/includes/configure.php as far as trying to edit it? Something doesn't add up...

Hey MC,
The only file in admin/includes/local/ is skip_version_check_ini.php and is an unmodified core file. I too have not made any changes to the admin htaccess file. I really am not feeling like this is a server issue. I'm on a dedicated server which has a handful of zen-carts which range from 1.5.1 to 1.5.4 and now the latest 1.5.5. I am only having this problem with the 1.5.5. I also have installed a test 1.5.5 on the domain which I am currently working. So, now there are two 1.5.5 ZC's on this domain. The one just under public_html is the one I'm working on to replace my 1.5.1 site. The second 1.5.5 is lower yet in a dir called demo. This site has no plugins/modifications and produces the same results when adding those couple of lines to the htaccess file. As previously stated - my live 1.5.1 which uses the exact same htaccess file has none of these issues.

Thank You,
John

Having taken a step back and rereviewed this thread, the problem is in your admin/includes/configure.php plain as day by the below attached post that seemingly I missed completely.

bumba000:

The admin/includes/configure.php also includes
define('HTTP_SERVER', 'http://domain.com');

There is no cert installed on the domain where I'm developing the new site. The htaccess file is a copy of the htaccess file currently being used by the live site (zc 1.5.1) on the same server which also uses USU.

This is what I get using the htaccess rules

and this is what I get without the htaccess rules

bumba000:

The rules in the htaccess file are at the top just below
Options +FollowSymLinks
RewriteEngine On
RewriteBase /

Removing them allows the site to be accessed with or without www, but zc adds www to all links which creates duplicate content.

in admin configure
define('HTTP_CATALOG_SERVER', 'http://www.domain.com');
define('HTTPS_CATALOG_SERVER', 'https://www.domain.com');
ENABLE_SSL is false for time being

in front end
define('HTTP_SERVER', 'http://www.domain.com');
define('HTTPS_SERVER', 'https://www.domain.com');
ENABLE_SSL is false for time being

Please note the differences between the bolded text. And in this case, no https: is not really a factor...

It is not related to ZC 1.5.5 specifically other than if the files were created by ZC, that the original plan was not provided to it (use of www.) or that after it was initially created, the file was updated/modified and www. wasn't taken into consideration.