Customers Can't Login

I mean...everytime I check or uncheck an option or I write to something the new value on DB comes empty...

any suggestion on this wird situation?

cheers! ;)

GOT IT DEFINITELY FIXED!!!!

...it was

define('HTTP_SERVER', 'https://www.mydomain.com');
define('HTTPS_SERVER', 'https://www.mydomain.com');
define('HTTP_CATALOG_SERVER', 'https://www.mydomain.com');
define('HTTPS_CATALOG_SERVER', 'https://www.mydomain.com');

...and not

define('HTTP_SERVER', 'http://www.mydomain.com');
define('HTTPS_SERVER', 'https://www.mydomain.com');
define('HTTP_CATALOG_SERVER', 'http://www.mydomain.com');
define('HTTPS_CATALOG_SERVER', 'https://www.mydomain.com');

:clap::clap::clap:

I can't open the custom register page...

rohitsax:

Go to ADMIN... CONFIGURATION... SESSIONS... RECREATE SESSIONS... set this to FALSE.

Should work though I'm not sure what it does.

You sir are a life saver.
I know this is old news to most people, but I just ran into the problem myself, after only 5 minutes of searching I found this thread and this post and bingo, you saved the day.

Thanks again!

This is really not the best solution as setting Recreate Sessions to false is less secure ...

Perhaps posting your files, from the server, without the username and passwords for the files:
/includes/configure.php
/admin/includes/configure.php

would help in looking for a solution for this ...

What version Zen Cart?

Clean install or an Upgrade?

What version php?

We are still experiencing problems with customers not being able to log into their accounts.

I wouldn't suggest marking recreate sessions to false - we tried and a bunch of people started logging into each other's accounts, its been a huge mess!

Are there any other ideas out there to stop the problem? We've been telling customers to clear their cookies, but they are still unable to log in, so we have to delete their accounts so they can recreate a new one.

Please help :(

PHP version 5.2.14
1.3.8a
clean install

I have been reading about this problem for a long time and still no solution yet ! My customers still can't access their account on my online store, I'm using zencart 1.3.9h I did everything what others suggested to do with no fix ! Please help ..
my link to my test website:

http://www.arab-broker.com/orientalmeal-3

rohitsax:

go to admin... Configuration... Sessions... Recreate sessions... Set this to false.

Should work though i'm not sure what it does.

thank you so much!!! I have been having issues with my website and customers not being able to log on for weeks and this solved it! Having spent hours over the last few days trying to find a solution this is a real relief!!! Thanks!! :)

I am reviving this thread yet again.

While it does appear that changing Recreate Sessions to False has resolved the issue, it concerns me about the slight security risk this posses. Although, I don't really remember what the risk is. I know I have read about this elsewhere on the forums, but I don't recall ever having found an eventual resolution to the issue if Recreate Sessions is set to true.

I am using ZC V.1.5.0. PhP version 5.3.26

I am veeeery green with this sort of thing, and I am not too sure about upgrading it because I am not the one who originally set it up. We went through an inventory data management company who set up our hosting and shopping cart and continue to do a daily inventory automation of our products and stock. I have been learning my way around the back-end of the software and have successfully set up my custom override folders and done a few tweaks here and there to one of the provided templates.

However, I am completely stumped on this one and have been searching around for about a week and a half now. :frusty:

I finally decided to try the Recreate Sessions suggestion, and it did work. However, I know this is just a temporary solution until the root of the issue is corrected because what I don't want once we get more traffic is someone's security being at risk.

Here is a link to our live store. http://store. al lgu nta lk.com

Please let me know if any more information would help diagnose this and I'll be happy to provide it!

Check this PHP configuration setting:

1. Admin->Tools->Server Info ... Press CTRL+F to "search the page" and search for session.hash_bits_per_character
2. If session.hash_bits_per_character is set to 6, then you'll need to apply this fix: http://www.zen-cart.com/showthread.php?215694&p=1270902#post1270902

DrByte:

Check this PHP configuration setting:

1. Admin->Tools->Server Info ... Press CTRL+F to "search the page" and search for session.hash_bits_per_character
2. If session.hash_bits_per_character is set to 6, then you'll need to apply this fix: http://www.zen-cart.com/showthread.php?215694&p=1270902#post1270902

Ok. I checked that. It is set to 4.

Zen Cart 1.5.1
Server OS: Linux 2.6.18-404.el5PAE
PHP Version: 5.2.17 (Zend: 2.2.0) PHP Memory Limit: 64M
Database: MySQL 5.0.96-log
HTTP Server: Apache
Hosted on GoDaddy

This has been an on-going problem for several years and several versions with my cart as well. I was hoping that upgrading to 1.5.1 over a year ago would solve the problem but it hasn't.

Customer tries to log in, it says they've entered the wrong password or email. They request a new password, it never comes. Then they email me for help.

Recreate sessions is False and session.hash_bits_per_character is 5.

My "fix" has been to go into their account, set their email to mine, request a new password (which always comes), then set their email back and email them the password. I can ALWAYS log in with either their email or mine with the new password but sometimes they still can't. I've had them reset cookies. Some of them have another computer that will work. It doesn't seem to matter if Mac or Windows or what browser or OS. It doesn't matter how tech savvy they are.

I don't want to delete their account because it stores all their digital download orders.

Site url: http://lindeegembroidery.com/shop/

So my questions are:
1 why don't they receive a new password?
2 why can't they log in?
3 how do I fix it without deleting their account?

Lindee

LindeeG:

Zen Cart 1.5.1
Server OS: Linux 2.6.18-404.el5PAE
PHP Version: 5.2.17 (Zend: 2.2.0) PHP Memory Limit: 64M
Database: MySQL 5.0.96-log
HTTP Server: Apache
Hosted on GoDaddy

...

Customer tries to log in, it says they've entered the wrong password or email. They request a new password, it never comes. Then they email me for help.

...

My "fix" has been to go into their account, set their email to mine, request a new password (which always comes), then set their email back and email them the password. I can ALWAYS log in with either their email or mine with the new password but sometimes they still can't.

...

So my questions are:
1 why don't they receive a new password?
2 why can't they log in?
3 how do I fix it without deleting their account?
...
1) Where is YOUR email account hosted? Are you using SMTPAUTH (highly recommended w/ TLS)? Does your email provider use SPF and / or DKIM (and are they configured correctly)? Is your email hosting provider on any email BLACKLISTS? Does your email hosting provider have any limitations (such as number per minute, number per week, blocked hosts, etc)? Have you read this article?

For most of my clients once the email server and Zen Cart email configuration is correct (all use SMTPAUTH), the only time the resets fail are: when the customer entered the wrong email address (either when creating the account or requesting the reset) or the email was rejected by the client's email filters (such as SPAM).

2) Wrong email or password message: Usually this indicates exactly that. The customer entered the wrong email address or password. This can also occur after the customer has filled out "forgotten password" (until they enter the new password from the email). Often I find this is a case of the customer trying to do a copy / paste and including an extra space (" ") before or after the password or email address.

Have also seen this caused when a customer's computer: was infected, had a BHO (Browser Helper Objects) installed which interfered with Zen Cart's cookies (and Zen Cart's sessions), or had a "password manager" installed / enabled (with wrong credentials). This can in rare cases be caused by a BHO from an antivirus / internet security product (some are a little overaggressive with blocking private information such as email addresses or blocking / scrubbing cookies).

Considering this always works for you (even when they claim it does not for them), most likely there is an issue with the customers computer or internet connection (such as the items mentioned above). There may be some other variables / causes, but those are the usual suspects.

Handling on a Case By Case Basis
Your current workflow should work just fine. Another alternative would be to install and use "encrypted master password" (lets you log in as a customer, change password, log out). Kinda overkill for the situation IMHO, but works well.

NOTE: The memory limit seems a little on the low side and I'd also recommend against staying with PHP 5.2 (if not already on a GoDaddy cPanel website upgrade -- or switch to a different hosting provider). Zen Cart 1.5.4 includes many bugfixes and enhancements (and will run under currently supported versions of PHP). You may want to peruse the known bugs (and fixes) for Zen Cart 1.5.4 and also for other versions. An upgrade is something I would start planning NOW (upgrade should be performed on a development site - separate from the live site). Always better to take care of security and upgrades on your schedule before a site stops working or is compromised.

lhungil:

Handling on a Case By Case Basis
Your current workflow should work just fine. Another alternative would be to install and use "encrypted master password" (lets you log in as a customer, change password, log out). Kinda overkill for the situation IMHO, but works well.

Just a clarification on the Encrypted Master Password operation; it allows you to log into a customer's account but does not support you changing the customer's password.

lat9:

Just a clarification on the Encrypted Master Password operation; it allows you to log into a customer's account but does not support you changing the customer's password.
Whoops, I thought one could log into a customer's account and then go to "My Account" and change the customer's password... My bad! Perhaps this one might be more appropriate.