Admin login not working

Hi People,

My admin logon randomly started saying insecure on chrome browser and an endless loop of not being able to login.

I have gone through the configure.php filed and corrected the SSL links so now i get no warnings except i still cannot login.

After editing the configure files, i clock login and the little icon in the corner thinking about it for a few seconds and gives me back the login page again!

I can send an admin reset passwrod email, i can receive the email. Login with it which gives me the prompt to set a new one which it then wont allow me to do now.

The site has been working find until the last three days. I havent upgraded, changed any settings etc.

my domain is chgclassics.co.uk and i am unsure which zencart version as i cant login to check :blink:

The site according to the whynopadlock is fine. Really confused with this one now!

Your site is not accessible with a message saying your DNS can't be found.
It sounds like a DNS server problem.

pilou2:

Your site is not accessible with a message saying your DNS can't be found.
It sounds like a DNS server problem.

???

charmes: # ping chgclassics.co.uk
PING chgclassics.co.uk (185.65.237.151) 56(84) bytes of data.
64 bytes from nomad.xssl.net (185.65.237.151): icmp_seq=1 ttl=43 time=172 ms
64 bytes from nomad.xssl.net (185.65.237.151): icmp_seq=2 ttl=43 time=147 ms
64 bytes from nomad.xssl.net (185.65.237.151): icmp_seq=3 ttl=43 time=201 ms
64 bytes from nomad.xssl.net (185.65.237.151): icmp_seq=4 ttl=43 time=347 ms
64 bytes from nomad.xssl.net (185.65.237.151): icmp_seq=5 ttl=43 time=161 ms
64 bytes from nomad.xssl.net (185.65.237.151): icmp_seq=6 ttl=43 time=189 ms
^C
--- chgclassics.co.uk ping statistics ---
6 packets transmitted, 6 received, 0% packet loss, time 5005ms

Some things to do ... check

• Check your database for a lockout (https://docs.zen-cart.com/user/troubleshooting/reset_admin_password/#4-watch-out-for-possible-stumbling-blocks)
• Clear your browser cache & temp files, clear any saved password in a password keeper... reboot your modem if necessary
• Check that you have not previously made an advanced request for the website (https://support.google.com/chrome/answer/114662?hl=en&co=GENIE.Platform%3DDesktop)
• Try another browser
• Make certain the new password is unique from the recent previous passwords

Just a note to make sure any browser you are using is up to date because your Let's Encrypt SSL has no throwback for TLS 1.0 & 1.1. This is as it should be, but if your browser or OS is out of date you may not be TLS 1.2 ready.

~Melanie

I've just signed in to ask this same exact question, conveniently, but I'm not sure the answer given works for me, since this is a new installation of the site, and the automatically generated password doesn't work. Neither does the one I get from the password reset email. This is on a subdomain of a site I've been using for a while, so all the DNS and SSL settings have been set up, and caused no issue previously, I don't see why they would suddenly stop working on just this software. Any thoughts?

kitutal:

I've just signed in to ask this same exact question, conveniently, but I'm not sure the answer given works for me, since this is a new installation of the site, and the automatically generated password doesn't work. Neither does the one I get from the password reset email. This is on a subdomain of a site I've been using for a while, so all the DNS and SSL settings have been set up, and caused no issue previously, I don't see why they would suddenly stop working on just this software. Any thoughts?

Yep, this is still for you =)

Some things to do ... check

• Check your database for a lockout (https://docs.zen-cart.com/user/troub...umbling-blocks)
• Clear your browser cache & temp files, clear any saved password in a password keeper... reboot your modem if necessary
• Check that you have not previously made an advanced request for the website (https://support.google.com/chrome/an...form%3DDesktop)
• Try another browser
• Make certain the new password is unique from the recent previous passwords

Just a note to make sure any browser you are using is up to date because your Let's Encrypt SSL has no throwback for TLS 1.0 & 1.1. This is as it should be, but if your browser or OS is out of date you may not be TLS 1.2 ready.

~Melanie

Greetings!

I'm a small business owner and new to working on websites for my business. My company is Cedar Grove Herbs. I have a main store on https://www.cedargrovehersb.com but I recently had someone install a new theme for me to work on/customized to replace my main store. The new theme is installed in subdirectory - https://www.cedargroveherbs.com/new.

I've been working on installing Easy Populate 4.0.36.ZC on my new zencart v.1.5.8 website. I have it on my main store and since I have so many products I want to be able to add them to my new site quickly; however I ran into a problem, I'm not quite sure what it is. When I clicked on easy populate in my tools on my admin I received a 404 error and then after clearing my cache on my website, my admin login page and admin page looked like this:

I'm hoping someone can help me get my admin log in page and admin page back to looking normal. I deleted the easypop files I added (nothing was overwritten) and I put back the .htaccess files that were there previously. Do I need to restore the admin/login page? Which file if so - as I do have my backup files made before any attempt at installation.

Fenomenal7:

Greetings!

I'm a small business owner and new to working on websites for my business. My company is Cedar Grove Herbs. I have a main store on https://www.cedargrovehersb.com but I recently had someone install a new theme for me to work on/customized to replace my main store. The new theme is installed in subdirectory - https://www.cedargroveherbs.com/new.

I've been working on installing Easy Populate 4.0.36.ZC on my new zencart v.1.5.8 website. I have it on my main store and since I have so many products I want to be able to add them to my new site quickly; however I ran into a problem, I'm not quite sure what it is. When I clicked on easy populate in my tools on my admin I received a 404 error and then after clearing my cache on my website, my admin login page and admin page looked like this:

I'm hoping someone can help me get my admin log in page and admin page back to looking normal. I deleted the easypop files I added (nothing was overwritten) and I put back the .htaccess files that were there previously. Do I need to restore the admin/login page? Which file if so - as I do have my backup files made before any attempt at installation.

your admin css files are not being loaded. there were a bunch of changes between v157 and v158.

i would compare the files in:

YOUR_ADMIN/includes/css/

to these files:

https://github.com/zencart/zencart/tree/v1.5.8a/admin/includes/css

and then compare the files here:

YOUR_ADMIN/includes/*.css

to any css files you see here:

https://github.com/zencart/zencart/tree/v1.5.8a/admin/includes

best.

I started out with v158 so I don't think that's the problem...

carlwhat:

your admin css files are not being loaded. there were a bunch of changes between v157 and v158.

i would compare the files in:

YOUR_ADMIN/includes/css/

to these files:

https://github.com/zencart/zencart/tree/v1.5.8a/admin/includes/css

and then compare the files here:

YOUR_ADMIN/includes/*.css

to any css files you see here:

https://github.com/zencart/zencart/tree/v1.5.8a/admin/includes

best.

I started out with v158 so I don't think v157 has anything to do with it but as far as admin css files not being loaded, sounds about right. I don't know how to fix it

Does anybody know what css file I need to restore from my backup to make the admin login page and admin page go back to looking normal? I have my backup files from before I made any changes.

Fenomenal7:

Does anybody know what css file I need to restore from my backup to make the admin login page and admin page go back to looking normal? I have my backup files from before I made any changes.

I would be inclined to wipe the whole admin directory and restore from backup - there could be other damage done which is preventing the .css files loading.

Fenomenal7:

Does anybody know what css file I need to restore from my backup to make the admin login page and admin page go back to looking normal? I have my backup files from before I made any changes.

Looks to me like perhaps you have an issue with https/http. This is controlled through YOUR_ADMIN/configure.php. basically if the admin is trying to connect via https, but a certificate is not dedicated for the associated domain name, then the result is as provided. Another example is if your certificate is for www.domain, but you're setup for domain, then the same applies.

mc12345678:

Looks to me like perhaps you have an issue with https/http. This is controlled through YOUR_ADMIN/configure.php. basically if the admin is trying to connect via https, but a certificate is not dedicated for the associated domain name, then the result is as provided. Another example is if your certificate is for www.domain, but you're setup for domain, then the same applies.

That is exactly right

mprough:

That is exactly right

I see. I have this installed in a subdirectory, because my main store is @ https://www.cedargroveherbs.com and I'm working on customizing the new store first before installing it over the main store. The problem I'm working on is at https://www.cedargroveherbs.com/new. How do I fix this? Should I replace mail.cedargroveherbs.com with https://www.cedargroveherbs.com/new? Where do I pull this up at?

mprough:

That is exactly right

Oh, I see it in the SSL/TLS

mprough:

That is exactly right

i am not sure about that.

i think what mc-digits said could be correct. there probably is a mix of http and https on the page.

but if the certificate is incorrect, which is what you suggest, why does a page like:

https://www.cedargroveherbs.com/new/index.php?main_page=index&cPath=162_168

not show any mismatched certificate errors?

i would agree that the common name on the certificate could be better (any more likely to be *.cedargroveherbs.com), but i do not think that is where the problem lies.

this is looking to be a permissions problem with the css files. the css files are all returning a 403 error.

i was able to do this via knowing where the admin directory lies through a PM.

carlwhat:

this is looking to be a permissions problem with the css files. the css files are all returning a 403 error.

i was able to do this via knowing where the admin directory lies through a PM.

I just got done chatting with my server host. They said they fixed the permissions and fixed the .htaccess file. They told me to clear my cache and try in another browser and it should be fixed but I did both these things and it wasn't. Then they said it should take 15-20 min so I will update you in 20 min.

Fenomenal7:

I just got done chatting with my server host. They said they fixed the permissions and fixed the .htaccess file. They told me to clear my cache and try in another browser and it should be fixed but I did both these things and it wasn't. Then they said it should take 15-20 min so I will update you in 20 min.

i am not sure about your hosts setup. but it is still returning a 403 for me. opening an incognito window in theory should bypass any browser side caching.

i believe a permissions issue fix should not require any waiting.