fishing4u:
Dr Byte - i cannot find ".htaccess" within the install folder
It's probably hidden in your FTP program, since files starting with a . are considered to be "hidden files", at least on Linux servers. You should be able to tell your FTP program to display hidden files, somewhere in your program preferences. Or if you filter on filenames that start with . you might find it too.
Or, you could use your hosting account control panel's file manager tool to find the file and rename it.
Or you could create a file on your PC named .htaccess (windows can be finicky with that though) and leave its contents blank or just a couple blank lines, and upload it to your zc_install folder, replacing the hidden one that's there ... effectively replacing the current settings in it with blanks. Or just edit the one on your PC in the zc_install folder, remove all its contents except the lines starting with a # and then upload it.
Why? I suspect that perhaps your server might be complaining about some of the mod-security settings therein.
Or else your server isn't accepting the overrides of mod-security and is simply blocking the URL parameters (likely the ones starting with http://blahblah) and doesn't want you to finish your install due to the risks that those kinds of parameters can mean if someone was trying to do something rogue.
You might get your host to override all those security things while you do the install. YOu'd have to talk to them and ask if they'll disable mod_security in your account at least temporarily.
A future version of Zen Cart will use a different method for passing parameters to the installer. For now it has this small limitation where some hosts block the data :(
.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole
Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.