Customer Login 'There was a security error when trying to login'

Hi,
I've tried searching forum but can't find my answer, could anyone advise:

Customer can register fine, but when they return and try to login to an exisiting account they get the message:

There was a security error when trying to login.

They can request a new password and its sent, but when they try to loggin with a new password they get the same message.

My Config info is:

Session Directory /var/www/html/shop/cache
Cookie Domain True
Force Cookie Use False
Check SSL Session ID False
Check User Agent False
Check IP Address False
Prevent Spider Sessions True
Recreate Session False
IP to Host Conversion Status false

https://www.zen-cart.com/tutorials/index.php?article=312

Thank you

Hi there,
I have same issue but i still do not understand what i have to do with those files, can anyone explain me please?

Okay... I've double checked my files, I've even downloaded the latest, greatest copy of v1.3.8a, which is what I have installed and overwritten the tpl_time_out_default.php and the tpl_login_default.php. I've tried switching out the templates to no avail. This site is expected to go live last week, but I've been fiddling with this problem. Does anyone have any idea how to solve it?

Tina

silkenstrand:

Okay... I've double checked my files, I've even downloaded the latest, greatest copy of v1.3.8a, which is what I have installed and overwritten the tpl_time_out_default.php and the tpl_login_default.php. I've tried switching out the templates to no avail. This site is expected to go live last week, but I've been fiddling with this problem. Does anyone have any idea how to solve it?What addons do you have installed?
Which template are you using? Are either of those template files you mentioned customized in the template you're using?
What is your URL?

http://hangupyourpride.com/index.php

(make sure to use the index.php, because if you don't you'll go to the under construction area)

I'm using a customized template, though I did test it with the classic template as well.

I've added the Purchase Orders module
I've added the TyPackageTracker
I've added the Group Pricing Module (which I can't get to work)

I have, however, replaced the tpl_time_out_default.php and the tpl_login_default.php with virgin copies.

Thanks for your help.

I just realized that my first post may have been misleading. I originally installed the latest version. I am not doing an upgrade.

From the header inside your /includes/functions/sessions.php file on your server, what is the version number and date stamp?

/**

• functions/sessions.php

• Session functions

• @package functions

• @copyright Copyright 2003-2005 Zen Cart Development Team

• @copyright Portions Copyright 2003 osCommerce

• @license http://www.zen-cart.com/license/2_0.txt GNU Public License V2.0

• @version $Id: sessions.php 6525 2007-06-25 21:49:57Z drbyte $

*/

That was the solution. I replaced that with a brand new copy (backing up the old file first) and voila... my site is now working at top speed. Thank you very much Dr. Byte for all your help!

Tina

I have the same problem even with the default template and i can't even use the admin

Also the site has been running for 4 months with no upgrades and just now i am getting this error. Is there any timeouts or date related issues?

Thanks

tang:

I have the same problem even with the default template and i can't even use the admin

tang:

Also the site has been running for 4 months with no upgrades and just now i am getting this error. Is there any timeouts or date related issues?

Thanks

Sounds like somebody has done some sort of upgrade ... perhaps your host did a PHP upgrade?

As for the "security error during login" problem, v1.3.8 added a specific security check ... so if you're running 1.3.8 then your template is missing something. Refer to the FAQ link posted earlier in this thread for more information on dealing with that if it applies to you.

PHP Version 5.2.5

I have fixed the admin but i cannot get around the customer login.

Thanks

I have just installed a new version 1.3.8a with a new database, create an account and when i try to login as customer i get the same error message. New cart is set as default with no https on configure file :cry:

A URL where this can be seen in action would be helpful ...

PM sent

During installation, were there any warnings that you ignored?
It seems as though the PHP session logic isn't firing properly, which suggests that maybe session support is disabled or broken.

Either that or you've got some odd server configuration rewrite rules set up which are preventing your store from obtaining the right information submitted from individual web pages.

Is there any way to get around it? Can i disable anything to get it going until we find the problem?

Thank you for your time.

No errors on install

PHP Version 5.2.5

Configure Command './configure' '--enable-bcmath' '--enable-calendar' '--enable-gd-native-ttf' '--enable-libxml' '--enable-magic-quotes' '--enable-mbstring' '--enable-pdo=shared' '--enable-sockets' '--enable-sqlite-utf8' '--prefix=/usr' '--with-curl=/opt/curlssl/' '--with-freetype-dir=/usr' '--with-gd' '--with-imap=/opt/php_with_imap_client/' '--with-imap-ssl=/usr' '--with-jpeg-dir=/usr' '--with-kerberos' '--with-libdir=lib64' '--with-libexpat-dir=/usr' '--with-libxml-dir=/opt/xml2/' '--with-mcrypt=/opt/libmcrypt/' '--with-mhash=/opt/mhash/' '--with-mysql=/usr' '--with-mysql-sock=/var/lib/mysql/mysql.sock' '--with-mysqli=/usr/bin/mysql_config' '--with-openssl=/usr' '--with-openssl-dir=/usr' '--with-pdo-mysql=shared' '--with-pdo-sqlite=shared' '--with-pic' '--with-png-dir=/usr' '--with-sqlite=shared' '--with-ttf' '--with-xmlrpc' '--with-xpm-dir=/usr/X11R6' '--with-xsl=/opt/xslt/' '--with-zlib' '--with-zlib-dir=/usr'
Server API CGI
Virtual Directory Support disabled
Configuration File (php.ini) Path /usr/lib
Loaded Configuration File /usr/local/lib/php.ini
PHP API 20041225
PHP Extension 20060613
Zend Extension 220060519
Debug Build no
Thread Safety disabled
Zend Memory Manager enabled
IPv6 Support enabled
Registered PHP Streams php, file, data, http, ftp, compress.zlib, https, ftps
Registered Stream Socket Transports tcp, udp, unix, udg, ssl, sslv3, sslv2, tls
Registered Stream Filters string.rot13, string.toupper, string.tolower, string.strip_tags, convert., consumed, convert.iconv., zlib.*

PHP Safe Mode: Off