Admin Login Issue - 1.3.7.1 and old version of PHP: 4.3.2

So I've completed new install and having same issue logging in the Admin Panel. I'm running 1.3.7.1 and PHP 4.3.2.

For us novices with PHP can you give us a line number or even better yet a before snippet of code and after snippet of code?

The Highlands Group

beerdawg:

It seems that logging into the admin pages with zen-cart-1.3.7.1 using PHP-4.3.2 is broken. After entering the correct login/passwd, it will just return back to the login page.

The issue has to do with the call to session_regenerate_id() from zen_session_recreate() in includes/functions/sessions.php (which is called from admin/login.php).

According to the php documentation for php, "Version 4.3.3: Since then, if session cookies are enabled, use of session_regenerate_id() will also submit a new session cookie with the new session id." See the documentation here:

http://us.php.net/manual/en/function.session-regenerate-id.php

That means that 4.3.2 does not submit a new session cookie with the new session id.

The fix provided by buraks78 in the comments in the link above seems to address the issue and fix the zen-cart login to the admin page.

Basically, add this directly after the call to session_regenerate_id() in includes/functions/sessions.php:

if(!version_compare(phpversion(),"4.3.3",">=")){
setcookie(
session_name(),
session_id(),
ini_get("session.cookie_lifetime"),
"/"
);
}

> 
> Herb.

So I've completed new install and having same issue logging in the Admin Panel. I'm running 1.3.7.1 and PHP 4.3.2.
Why install 1.3.7.1 when latest version 1.3.8.a would undoubtedly fix
your problem?

Sorry. My mistake. Version is 1.3.8a. So problem exists with latest version.

I have run new password script to log into Admin section and changed password in backend. This is a fresh install. I am able to login successfully using Firefox browser but not IE 6.0. I've cleared cache, cookies and history in IE. I also went to cookie files and deleted. Firefox works and I can work in admin area but can't in IE?

What gives?

As a matter of courtesy to other Zenners - I was able to resolve the issue on my own.

I added the code in the posting above where there are not 1 but 4 instances directly after the call to session_regenerate_id() in includes/functions/sessions.php file.

I rebooted computer, cleared cookies and files from IE and FF browsers. Cleared files in cache on server and voila it worked.