Is this the version you requested?

Your version of Zen Cart® appears to be current.
(You are presently using: v1.5.7d)

Angiex1:

Is this the version you requested?

Your version of Zen Cart® appears to be current.
(You are presently using: v1.5.7d)

That's part of it, though that describes the software version of the Zen Cart software and confirms that are using the latest published production version. Normally would suggest to include the information down to where the php info begins, but am afraid that the display may not be so well broken up at this point.

It would be basically at this link: YOUR_ADMIN/index.php?cmd=server_info

Erm I cannot find that server info am a bit unsure how.

Was the code I provided correct?

Swguy mentioned some old css but am not sure where that would of come from but would that have an effect?

Please is there any help with this.

I have uninstalled it removed database and user. New databas and user with all permissions. Re-downloaded a fresh copy of zencart new install followed the instructions including renaming the admin folder, cleared cache and the admin panel is still the same

Angiex1:

Erm I cannot find that server info am a bit unsure how.

Was the code I provided correct?

Code provided (.htaccess) matches/matched what was provided in the original download of Zen Cart 1.5.7d, so "correct" to the Zen Cart version, but in part still need to positively identify that is proper for the server itself. At the same time, that particular .htaccess file may not be an issue. See more below

Angiex1:

Swguy mentioned some old css but am not sure where that would of come from but would that have an effect?

His response was like the 95% issue that many face. They have an admin directory, they do an upgrade/install/reinstall to the same admin directory. Browsers remember that CSS files don't change often and so, internally reload the same CSS file. The upgraded version though has different content and causes the display to look wrong. Again, refreshing the cache of the browser would fix that sort of issue. But in your case as I previously mentioned, the css files in that directory are/were prevented from being loaded by the server/system. It has ZERO to do with the Zen Cart software as much as it does with something about the server setup, something in the root of the server or above that folder.

Angiex1:

Please is there any help with this.

I have uninstalled it removed database and user. New databas and user with all permissions. Re-downloaded a fresh copy of zencart new install followed the instructions including renaming the admin folder, cleared cache and the admin panel is still the same
Don't change it, but is the admin directory the same or different from what it was before?

Is there an .htaccess file at: "filemanager/public_html"? If not one there, is there one at "filemanager/"?

When one is found at those directories, please post contents and obscure anything you believe needs to be "hidden" from public view. Remember to use the code tags as you have done previously.

admin folder name has changed as new install, frontend of site is working fine it is as though the setout of the admin is not working properly.
I have just asked my webhost if there could be an issue via the hosting side waiting on a reply.
there is no .htaccess file in file manager or public html but there is one in the admin folder which I have attached below permissions set at 644.

###############################
DirectoryIndex index.php

# deny *everything*
<FilesMatch ".*\..*">
  <IfModule mod_authz_core.c>
    Require all denied
  </IfModule>
  <IfModule !mod_authz_core.c>
    Order Allow,Deny
    Deny from all
  </IfModule>
</FilesMatch>

# allow access to the root
<FilesMatch "^$">
  <IfModule mod_authz_core.c>
    Require all granted
  </IfModule>
  <IfModule !mod_authz_core.c>
    Order Allow,Deny
    Allow from all
  </IfModule>
</FilesMatch>

# but now allow just *certain* necessary files:
<FilesMatch "(?i).*\.(php|html?|js|css|jpe?g|gif|webp|png|otf|ico|cur|map|eot|svgz?|ttf|woff2?|xml|xsl|csv|txt)$">
  <IfModule mod_authz_core.c>
    Require all granted
  </IfModule>
  <IfModule !mod_authz_core.c>
    Order Allow,Deny
    Allow from all
  </IfModule>
</FilesMatch>

IndexIgnore */*

<limit POST PUT>
  <IfModule mod_authz_core.c>
    Require all denied
  </IfModule>
  <IfModule !mod_authz_core.c>
    Order Allow,Deny
    Deny from all
  </IfModule>
</limit>


## NOTE: If you want even greater security to prevent hackers from running scripts in this folder, uncomment the following line (if your hosting company will allow you to use OPTIONS):
# OPTIONS -Indexes -ExecCGI



##################
## Optional caching improvements
## Requires mod_header and mod_deflate to be enabled within Apache
##################
<IfModule mod_headers.c>
  Header unset Pragma
  FileETag None
  Header unset ETag
  #Header set Cache-Control "no-transform"
  <FilesMatch "(?i).*\.(ico|jpe?g|gif|otf|webp|png|svgz?)$">
    Header set Cache-control "max-age=864000, public, must-revalidate"
    Header unset Last-Modified
  </FilesMatch>
  <FilesMatch "(?i).*\.(html|htm|xml|txt|xsl)$">
    Header set Cache-control "max-age=7200, must-revalidate"
  </FilesMatch>
</IfModule>
<IfModule mod_deflate.c>
  <FilesMatch "(?i)\.(js|css)$">
    SetOutputFilter DEFLATE
  </FilesMatch>
</IfModule>

##################
## Optional improvements
## Requires mod_expires to be enabled within Apache
##################
<ifmodule mod_expires.c>
  ExpiresActive On
  ExpiresDefault A300
  ExpiresByType application/x-javascript A3600
  ExpiresByType text/css A3600
  ExpiresByType image/gif A604800
  ExpiresByType application/pdf A604800
  ExpiresByType text/html A300
  ExpiresByType image/x-icon A86400
  ExpiresByType image/jpeg A2592000
  ExpiresByType image/png A2592000
  ExpiresByType text/cache-manifest "access plus 0 seconds"
  ExpiresByType image/svg A2592000
</ifmodule>


#turn off X-PHP-Originating-Script header when sending emails from admin
#uncomment to activate:
# php_flag mail.add_x_header Off

Angiex1:

admin folder name has changed as new install, frontend of site is working fine it is as though the setout of the admin is not working properly.
I have just asked my webhost if there could be an issue via the hosting side waiting on a reply.
there is no .htaccess file in file manager or public html but there is one in the admin folder which I have attached below permissions set at 644.

###############################
DirectoryIndex index.php

deny everything

<FilesMatch "...">
<IfModule mod_authz_core.c>
Require all denied
</IfModule>
<IfModule !mod_authz_core.c>
Order Allow,Deny
Deny from all
</IfModule>
</FilesMatch>

allow access to the root

<FilesMatch "^$">
<IfModule mod_authz_core.c>
Require all granted
</IfModule>
<IfModule !mod_authz_core.c>
Order Allow,Deny
Allow from all
</IfModule>
</FilesMatch>

but now allow just certain necessary files:

<FilesMatch "(?i).*.(php|html?|js|css|jpe?g|gif|webp|png|otf|ico|cur|map|eot|svgz?|ttf|woff2?|xml|xsl|csv|txt)$">
<IfModule mod_authz_core.c>
Require all granted
</IfModule>
<IfModule !mod_authz_core.c>
Order Allow,Deny
Allow from all
</IfModule>
</FilesMatch>

IndexIgnore /

NOTE: If you want even greater security to prevent hackers from running scripts in this folder, uncomment the following line (if your hosting company will allow you to use OPTIONS):

OPTIONS -Indexes -ExecCGI

##################

Optional caching improvements

Requires mod_header and mod_deflate to be enabled within Apache

##################
<IfModule mod_headers.c>
Header unset Pragma
FileETag None
Header unset ETag
#Header set Cache-Control "no-transform"
<FilesMatch "(?i)..(ico|jpe?g|gif|otf|webp|png|svgz?)$">
Header set Cache-control "max-age=864000, public, must-revalidate"
Header unset Last-Modified
</FilesMatch>
<FilesMatch "(?i)..(html|htm|xml|txt|xsl)$">
Header set Cache-control "max-age=7200, must-revalidate"
</FilesMatch>
</IfModule>
<IfModule mod_deflate.c>
<FilesMatch "(?i).(js|css)$">
SetOutputFilter DEFLATE
</FilesMatch>
</IfModule>

##################

Optional improvements

Requires mod_expires to be enabled within Apache

##################
<ifmodule mod_expires.c>
ExpiresActive On
ExpiresDefault A300
ExpiresByType application/x-javascript A3600
ExpiresByType text/css A3600
ExpiresByType image/gif A604800
ExpiresByType application/pdf A604800
ExpiresByType text/html A300
ExpiresByType image/x-icon A86400
ExpiresByType image/jpeg A2592000
ExpiresByType image/png A2592000
ExpiresByType text/cache-manifest "access plus 0 seconds"
ExpiresByType image/svg A2592000
</ifmodule>

#turn off X-PHP-Originating-Script header when sending emails from admin
#uncomment to activate:

php_flag mail.add_x_header Off

For info/verification that the issue is resolved, you should be able to see content on screen when you use your browser to goto:  YOUR_SITE/PATH_TO_ADMIN/includes/css/login.css
When the admin directory was known (based on it being included in a previous image) a 403 error was generated. That is a response indicating a denial of access to the file. While yes the file is behind the admin directory, access to it should not require a Zen Cart login. It does require one to know the name of the directory. I have no need to know that and why I am passing on a method of testing. 

You might also (now that the admin directory is not public) attempt renaming the .htaccess file that is in the admin directory to see if doing so restores access to that file. If it does restore access, then need to troubleshoot the contents to identify where the issue may be. I have a bunch that the section of the above htaccess dealing with deflate may be the cause. 

If the above rename restores access then may try changing: 

# <IfModule mod_deflate.c>
#   <FilesMatch "(?i)\.(js|css)$">
#    SetOutputFilter DEFLATE
#   </FilesMatch>
# </IfModule>

By adding a hash tag followed by a space before each of those lines.

I have access to the admin panel, there was a 403 error but clearing cache sorted that.

Going to that link brings up a 403 error, also there is no login css in that file in filemanager either

Sorry it is there

The path to YOUR_SITE/PATH_TO_ADMIN/includes/css/login.css brings up a 403 error

but the file is there

/**
 * @copyright Copyright 2003-2020 Zen Cart Development Team
 * @copyright Portions Copyright 2003 osCommerce
 * @license http://www.zen-cart.com/license/2_0.txt GNU Public License v2.0
 * @version $Id: Erik Kerkhoven 2020 Jan 21 New in v1.5.7 $
 */

body {
  background-color: #feffef;
}

h2 {
  border-bottom: 1px solid #e3e3e3;
}

a {
  color: #777777;
}

a:hover {
  color: #0056b3;
}

.login-main-div {
  background: #ffffff none repeat scroll 0 0;
  border-radius: 2px;
  margin-top: 15px;
  padding: 50px 70px 70px 71px;
}

.login-box-shadow {
  -webkit-box-shadow: 4px 10px 41px 0px rgba(161, 161, 161, 0.75);
  -moz-box-shadow: 4px 10px 41px 0px rgba(161, 161, 161, 0.75);
  box-shadow: 4px 10px 41px 0px rgba(161, 161, 161, 0.75);
}

.login-alert-warning {
  background: #ffc107;
  border: 1px solid #ccc;
  color: #333;
}

@media screen and (max-width: 63.999rem) {
  .login-main-div {
    padding: 25px 35px 35px 35px;
  }
}
@media screen and (max-width: 47.999rem) {
  .login-main-div {
    padding: 25px 35px 35px 35px;
  }
}
@media screen and (max-width: 29.999rem) {
  .login-main-div {
    padding: 15px 25px 25px 25px;
  }
}

What name change to the .htaccess file what would be the best new name for it?

Have cleared cache on Chrome, firefox and edge and trie to go to https://www.angiesartspace.co.uk/admin folder/includes/css/login.css and 403 forbidden on all 3, is that the correct path?

Angiex1:

What name change to the .htaccess file what would be the best new name for it?

When needed, I tend to rename my .htaccess to something like .htaccess_o (best not to remove to period at the beginning - I've had difficulty, on a Windows PC, adding it back in)

As @mc12345678 said - if, after renaming that .htaccess, you can successfully visit the login.css url in your browser then further investigation can be made.

Angiex1:

Sorry it is there

Whew. Glad it could be found. :smile:

Angiex1:

Have cleared cache on Chrome, firefox and edge and trie to go to https://www.angiesartspace.co.uk/admin folder/includes/css/login.css and 403 forbidden on all 3, is that the correct path?

Assuming we all agree that "admin folder" represents your secret folder name for the admin, then yes referring to the path.

Further I agree with simon1066's potential rename.

The preceeding period keeps the file hidden within the directory structure though I note that at least in this case it's not that the contents are exactly "secret". After all, anyone installing the software would be able to obtain a copy of what is expected to be in that file... keeping the period would be more of a reminder to you that it should begin with a period, but because the operating system (not zen Cart) will process an .htaccess file but not as possibly suggested an .htacces_o file, it will be ignored and "temporarily" the folder will not have the protection offered by that file.

Note, the server may need a moment to recognize the absence of that file. So please have some patience when testing that css path. May also be necessary to then try a bruiser that hasn't recently been used to access the path and/or clear cache/cookies, etc...

Thank you all so much for your help it is now working,
My host looked after I contacted them this morning and from their end said it looks like some of the core files and can I try installing via Softaculous to see if that worked, before contacting them I tried via Softaculous with the same result, then removed that, cleared cashe and instead of using the same zip file redown loaded a new one this morning from here and installed with that cleared cache in 3 different browsers and all with the same results.

The host has then looked and made a change in the .htaccess file in my admin folder and it is now working, even the login page looks correct etc. But a big thank you to everyone who has helped, it is many years since I have used zencart so am a bit wary of messing with files and folders until am more used to it again so thank you for your patience.

Here is the fix for future if this happens again to anyone and me lol.

t appears that the .htaccess file in the /admin folder was causing this. Specifically this section:

I've changed this to just <limit PUT>, and the login screen & admin area now appears to be working ok.

Angiex1:

Thank you all so much for your help it is now working,
My host looked after I contacted them this morning and from their end said it looks like some of the core files and can I try installing via Softaculous to see if that worked, before contacting them I tried via Softaculous with the same result, then removed that, cleared cashe and instead of using the same zip file redown loaded a new one this morning from here and installed with that cleared cache in 3 different browsers and all with the same results.

The host has then looked and made a change in the .htaccess file in my admin folder and it is now working, even the login page looks correct etc. But a big thank you to everyone who has helped, it is many years since I have used zencart so am a bit wary of messing with files and folders until am more used to it again so thank you for your patience.

Here is the fix for future if this happens again to anyone and me lol.

t appears that the .htaccess file in the /admin folder was causing this. Specifically this section:

<limit POST PUT> <IfModule mod_authz_core.c> Require all denied </IfModule> <IfModule !mod_authz_core.c> Order Allow,Deny Deny from all </IfModule> </limit>

I've changed this to just <limit PUT>, and the login screen & admin area now appears to be working ok.

Huh, interesting.

What's also interesting to note is how this area of code had changed over time. Specifically, the sequence of the allow,Deny portion. Previously it was Deny, allow. I'm looking into what impact that has and in a way what really should be going on in this area.

Oye, what an interesting situation this is and without further action there may be some other areas of the site One,.

Okay, before I go into some techno babble about what the file was like before, what it did as a result, why it likely was changed and similar info about the current file configuration, my earlier question about your server data ask applies and is expected to help in this endeavor.

So, once you login to your admin, if you would please go up to the right corner and click on the link that says Version could you please post the upper info of the window? Don't need to see your upgrade history, just the server related info.

Also, you mentioned that it had been some time since doing this type of install/upgrade or some similar content as relates to Zen-Cart. Did this server have an older version of Zen Cart installed? If so, which? This is to support inspection of the way forwards.

Hi,

This is a new webhost account, and a new domain so have not had any older versions of zencart installed, as I have said I have installed and uninstalled a few times and also tried softaculous, between each install when uninstalling all the database and data base user have been removed and also any files in the public_html and the trash can so there was nothing there at all that I could see.

There had been a cubecart then a open cart install previously but again these were completely removed and the corresponding data bases and data base users before installing Zencart.

Here is a screenshot of the info for the server.

Who is your webhost? Does your account, per chance, have "Caching" enabled?

Hi, I am not sure about cacheing being enabled I can look if someone points me in the right direction, the host is HostPresto