"There was a security error when trying to login" - v1.3.8

i have just upgraded and now getting this error when trying to login from customer screen "There was a security error when trying to login"

You didn't upgrade your /includes/templates/YOUR_TEMPLATE/templates/tpl_login_default.php file to use the new code.

Remember, when upgrading, you need to merge the changes from the new code into all your customized files, or else you will end up missing new functionality.

Thanks Mr Byte

what about in admin - getting the same thing there

I guess a little explanation would be helpful. I have a demo zencart with no changes. I uploaded the new version. Database changes made. Now can't get in.

Also installed a brand new cart - no problems at all there.

I'm getting the same thing and I'm not sure what Dr Byte's answer is telling me.

Would you mind giving a bit of detail to explain what to do?

Sorry to be a noob. I didn't think I was, but it seems I am here.:lookaroun

Steven

where is your problem? admin or as customer in the cart?

... doesn't anyone ever read the instructions - NEVER NEVER NEVER upgrade your live site without doing a test upgrade and without backups.

Ah, and if the world was only perfect! Since I upgraded a clean (test) installation of zencart, I need answers.

I'm upgrading from 1.3.7 to 1.3.8 on a completely new host so my real site is safe until I've got it all working smoothly. I've copied my db and my old zencart over to the new host, but obviously mucked something up.
Currently I can't make the database upgrade, I just get a blank page in the install and I can't get a customer login due to the security error mentioned above.

any help will be appreciated.

Steven

we have run 3 seperate upgrades ( all test sites ) with no errors at all

Merlin, I'm no newbie. I'm now going to install a brand new 1.37 and then upgrade it to see if I can get one to go smoothly. That's not the problem though. I've got lots of upgrades to do in the near future with my clients and I've got to get a firm grasp on this quickly.

If I simply uploaded the new version over the old and the admin login isn't working, where can the problem be? The functions/sessions.php file and the login files are only 2 files where the changes have been made, correct?

Server configuration? phpInfo?

my dedicated server where most of my customer carts are:
http://ddhosting.com/phpinfo.php

For the admin login problem. Can u try a few things.

If u have been using IE as your browser, can u test in Firefox, or check your security settings in IE. Does lowering those settings help.

Whichever browser you use, try clearing **both **the cookies **and **the cache, and **restarting **the browser.

If you have https enabled for admin, try disabling it in configure.php

Ensure the host setting (HTTP_SERVER) in configure.php is actually correct and matches your server's Hostname.

Wilt, thanks for the assistance.
I've tried in both Firefox and IE and I receive the same error.

I also noticed that if I try to "add to cart", previously i would get errors telling me to fill out my various attributes, now it just says my shopping cart is empty.

I'm still confused what Dr Byte is saying about merging my tpl_login_default.php
I've not changed my template yet, I've stuck with the default and I can't see anything in this file using winmerge that would need merging.
Help please. :blink:

Steven

Nedward:

I'm still confused what Dr Byte is saying about merging my tpl_login_default.php
I've not changed my template yet, I've stuck with the default and I can't see anything in this file using winmerge that would need merging.
Help please. :blink:

Steven

Have you ever created a new template or are you just using the default/classic template the install came with? Had you changed any files before the upgrade?
Install any mods? Did you just upload all the new files to the site or just a few?

If you've not made any changes to the login template and are still using the default template, where did you put the new login template?

It sounds like you haven't uploaded everything to all the right places.

Hi Delia, it's a complete fresh install using 1.3.8 and I'm using my backed up sql file to populate the database. The only files I've changed are both configure.php files and then changed a few texts to change the "sales message goes here" etc. I haven't touched the template.

Delia quote "If you've not made any changes to the login template and are still using the default template, where did you put the new login template?"

Delia, when you say where did you put it, I didn't put it, I just left it where it was from the copy over of the 1.3.8 files.

thanks for the assistance

Steven

Nedward,

If you read this thread from the top, including the title, you'll note that my response about the tpl_login_default.php file is related to the "There was a security error when trying to login."

If that's not the problem you're experiencing, I'm not surprised that you're confused by the answers posted.

DrByte:

Nedward,

If you read this thread from the top, including the title, you'll note that my response about the tpl_login_default.php file is related to the "There was a security error when trying to login."

If that's not the problem you're experiencing, I'm not surprised that you're confused by the answers posted.

Just see this:

"There was a security error when trying to login"

Situation:
I have just upgraded and now getting this error when trying to login from the customer screen "There was a security error when trying to login"

Cause:
Zen Cart™ v1.3.8 has an added security feature to prevent spoofed external logins. A "security token" field has been added to all login forms. This token must be current (not expired), and must be submitted with login username+password in order for logins to work properly.

Remedy:
If you have customized template "login" files, the new security features need to be merged into your customized template files.

The following files are affected:

• /includes/templates/YOUR_TEMPLATE/templates/tpl_login_default.php
• /includes/templates/YOUR_TEMPLATE/templates/tpl_timeout_default.php

And if you're encountering it in your Admin area, this file is affected as well:

• /admin/login.php

But what do I need to edit in the above files to get this to work?