php 5.2.0 update problem

sh33pz:

:sleepy: My clients on my server also have the same issue... There seems to be a issue with ZenCart and php-5.2. In order to correct the issue I had to roll back php to 5.1.6.

Any Idea when a fix/patch will be released?

As a workaround: you don't have to roll back to php 5.1.6. Just change your session to be "file based" from "database based" in the ZenCart config file: includes/configure.php and admin/includes/configure.php

This way you can still run ZenCart while taking advantage of the PHP 5.2.0 security and bug fixes. But I would still prefer to switch back to database-based session for security sometime later when we find a solution.

Aww sweet, Thanks for the info.

Will try that out later tonite

Meanwhile others find the same problem:

http://community.mybboard.net/showthread.php?tid=13506&page=1

And it's been reported now:

http://bugs.php.net/bug.php?id=39381

So it's not ZC which is giving php a bad rep like this twit claims

http://caseysoftware.com/zend-conference-2006-day-2

but php.net themselves which first quarrel about 5.2.0 for several weeks and then YET again don't get it right so half the world is laughing about more bugged or better f***ed-up php-releases :shocking: Like last time 5.1.6 when they "forgot" something for the 64bit uP, unbelievable. This is really gonna start to pi55 me off now ... :cry:

And more from another completely different project:

http://www.dotproject.net/vbulletin/showthread.php?p=26051

:sleepy:

Thanks for the info bud :) So it's off to php.net to bug them for a fix Thanks to everyone for their help! My clients will be happy to know.. its php itself to blame not Zen Cart !!!

As fir the Zen Cart Coders... Keep up the good work! I kinda figured after.. it must be php itself.. I just couldn't see ya guys.. over look this!

It appears as though PHP has assigned the bug to someone for fixing.

However, in the meantime, you have two options:
a. use file-based caching instead of database-based (not really a good solution, but works around the problem, but is less secure and much less flexible for most hosting environments. 'db' is really the better choice except in the case of this PHP bug):
configure.php file:
define('STORE_SESSIONS', '');

OR:

A Suggested Bandage:
b. edit /includes/functions/sessions.php
and** /admin/includes/functions/sessions.php**, if it exists on your site:

    function _sess_write($key, $val) {
      global $db;
      global $SESS_LIFE;

change to:

    function _sess_write($key, $val) {
      // The following is only to work around a PHP 5.2.0 bug:
      global $db;
      if (!is_object($db)) {
        //PHP 5.2.0 bug workaround ... 
        $db = new queryFactory();
        $db->connect(DB_SERVER, DB_SERVER_USERNAME, DB_SERVER_PASSWORD, DB_DATABASE, USE_PCONNECT, false);
      }

      global $SESS_LIFE;

Option (b) may or may not be "complete", and has only had preliminary testing. The best fix will be to have PHP fix their bug, of course.

NOTE: If this fix "works" for you, then you need to upgrade your version of Zen Cart ... sooner than later. The latest version of Zen Cart contains a number of fixes related to PHP5 and MySQL5. You should plan your upgrade ... soon.

Addendum: There are some other technical approaches which could be used to address the session_write_close() and register_shutdown_function() changes introduced in this new PHP version. These may be explored in the future. For now, the above approaches are the simplest to implement for those needing to make a quick-fix to their code.

Thanks

it is working now.

Thanks for the workaround DrByte! :clap: :cheers:

The related PHP bug (http://bugs.php.net/bug.php?id=39381) was updated by the PHP developer asking for sample code to reproduce. Anyone can provide one? DrByte? :)

Hello ! This is my first post on zen-cart forum ! I wanna thank you very much to DrByte ! Good job. Best regards!

php.net have marked their bug or better fcukup as bogus now so they won't fix it :shocking: :huh:

All--

Running into an interesting challenge with our store. We did an upgrade to our server for XML purposes, ran into the session challenge described in this thread. Using Dr. Byte's fix seemed to work...for a few days. Then one of our admin users (there are 5, using the main admin password) described getting kicked out of the Admin area....but only on some computers. We performed the usual cache and session clearing on her computer, plus installed Firefox since we're convinced that IE is the root of all internet evil. The problem seemed to right itself...at least for a few days.

We've gotten word that another user is having this problem, only clearing cache and switching to Firefox seems to do nothing. We've logged into her computer using a different user profile (running win xp) and the admin area works fine. However, no matter what we do, we can't get reports to work for her. The usual answer would be to fix the roaming profile she uses on the Win2k3 server, but roaming profiles are off....and the problem persists across any computer she jumps on in the office.

Anybody have any ideas at all? I'm convinced this is a profile issue, but we can't prove it.

Thanks,
Ben Peterson
Interactive Media Developer
Space Foundation

i tired this fix but got this error.

Fatal error: Cannot redeclare _sess_write() (previously declared in /home/bdmaxcl/public_html/store/includes/functions/sessions.php:34) in /home/bdmaxcl/public_html/store/includes/functions/sessions.php on line 53

please post fix asap.

Both of the sessions.php function files need to be updated ...

http://www.zen-cart.com/forum/showpost.php?p=287587&postcount=26

/includes/functions/sessions.php

/admin/includes/functions/sessions.php

The files are pretty similar ... and the fix is more or less the same ...

NOTE: If this fix "works" for you, then you need to upgrade your version of Zen Cart ... sooner than later. The latest version of Zen Cart contains a number of fixes related to PHP5 and MySQL5. You should plan your upgrade ... soon.

Okay. I have done the session fix. While the error message is gone, when I "sign in", I don't get any further than the sign in page. That's right. It's like the sign in page is refreshing.

Marci

Make sure both look EXACTLY like this:

    function _sess_write($key, $val) {
      // The following is only to work around a PHP 5.2.0 bug:
      global $db;
      if (!is_object($db)) {
        //PHP 5.2.0 bug workaround ...
        $db = new queryFactory();
        $db->connect(DB_SERVER, DB_SERVER_USERNAME, DB_SERVER_PASSWORD, DB_DATABASE, USE_PCONNECT, false);
      }
      global $SESS_LIFE;

NOTE: If this fix "works" for you, then you need to upgrade your version of Zen Cart ... sooner than later. The latest version of Zen Cart contains a number of fixes related to PHP5 and MySQL5. You should plan your upgrade ... soon.

NOTE: this php 5.2.0 bug does have a temporary fix built into Zen Cart v1.3.7 ...

For this and other issues for security, bugfixes and additional features it is strongly recommended that you upgrade to Zen Cart v1.3.7 ...

Thanks for the workaround DrByte! Works like a charm! :happy:

NOTE: this is built into the current version of Zen Cart ... v1.3.7 ... might want to upgrade for this and many other bugfixes, security issues and features ...

Plus, if using PayPal ... keep an eye on the PayPal Patch thread:
http://www.zen-cart.com/forum/showthread.php?t=56216

On this and other threads, I'm seeing some people recommend this:
define('STORE_SESSIONS', '');

and some this:
define('STORE_SESSIONS', 'file');

Is there a difference between these two options? Is one of them better? They both seem to work.