Customers Unable to login

[adam71o]

I just got a call from a customer saying that when they try to login (in login.php), after clicking "continue" they are basically taken right back to login.php, and are not successfully logged in.

Thinking that this person was crazy, I went back and logged in, logged out, logged in, logged out, for a few times. A few minutes later I encountered the SAME problem: when logging in (in login.php), sometimes clicking "continue" basically serves to reload login.php .

This is a HUGE problem, and as I have made no modifications to login.php, I could sure use some help fixing this.

(oscmax v1.7)

[adam71o]

Not a fix, but a workaround of this problem (if anyone else ever experiences it) is to:

1. back up the store's database

2. totally copy the store to another directory and run that database query on the new store

---in about a window of an hour, I have been unable to reproduce the same problem on the "new" store

[adam71o]

Nope, my mistake, same problem is still here, this is SO aggravating because I'm getting calls from return customers (wholesalers) saying "I can't login."

[adam71o]

I just found an interesting fact: When I setup configure.php NOT to use my ssl cert., this error is not encountered (I THINK).

Here is catalog/includes/configure.php with ssl disabled:

<?php
/*
  osCommerce, Open Source E-Commerce Solutions
  http://www.oscommerce.com

  Copyright (c) 2003 osCommerce

  Released under the GNU General Public License
*/

// Define the webserver and path parameters
// * DIR_FS_* = Filesystem directories (local/physical)
// * DIR_WS_* = Webserver directories (virtual/URL)
  define('HTTP_SERVER', 'http://www.petsinstone.com'); // eg, http://localhost - should not be empty for productive servers
  define('HTTPS_SERVER', 'https://www.petsinstone.com'); // eg, https://localhost - should not be empty for productive servers
  define('ENABLE_SSL', false); // secure webserver for checkout procedure?
  define('HTTP_COOKIE_DOMAIN', 'www.petsinstone.com');
  define('HTTPS_COOKIE_DOMAIN', 'www.petsinstone.com');
  define('HTTP_COOKIE_PATH', '/store/');
  define('HTTPS_COOKIE_PATH', '/store/');
  define('DIR_WS_HTTP_CATALOG', '/store/');
  define('DIR_WS_HTTPS_CATALOG', '/store/');
  define('DIR_WS_IMAGES', 'images/');
  define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');
  define('DIR_WS_INCLUDES', 'includes/');
  define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');
  define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');
  define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');
  define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');
  define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');

  define('DIR_WS_DOWNLOAD_PUBLIC', 'pub/');
  define('DIR_FS_CATALOG', '/home/richard/public_html/store/');
  define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG . 'download/');
  define('DIR_FS_DOWNLOAD_PUBLIC', DIR_FS_CATALOG . 'pub/');

// define our database connection
  define('DB_SERVER', 'localhost'); // eg, localhost - should not be empty for productive servers
  define('DB_SERVER_USERNAME', 'blah');
  define('DB_SERVER_PASSWORD', 'blah');
  define('DB_DATABASE', 'blah');
  define('USE_PCONNECT', 'false'); // use persistent connections?
  define('STORE_SESSIONS', ''); // leave empty '' for default handler or set to 'mysql'
  // CLR 020605 defines needed for Product Option Type feature.
  define('PRODUCTS_OPTIONS_TYPE_SELECT', 0);
  define('PRODUCTS_OPTIONS_TYPE_TEXT', 1);
  define('PRODUCTS_OPTIONS_TYPE_RADIO', 2);
  define('PRODUCTS_OPTIONS_TYPE_CHECKBOX', 3);
  define('TEXT_PREFIX', 'txt_');
  define('PRODUCTS_OPTIONS_VALUE_TEXT_ID', 0); //Must match id for user defined "TEXT" value in db table TABLE_PRODUCTS_OPTIONS_VALUES
?>

The ONLY difference when it is ENABLED is:

  define('ENABLE_SSL', true); // secure webserver for checkout procedure?

For some reason, changing that "false" to "true" causes login.php to simply reload when "continue" is clicked, half of the time. The OTHER half of the time, it works normally. Whats the difference? -- I don't know.
Another interested fact is that it DOES validate the login! If you enter a correct login, then the page is reloaded (but you are not logged in) and there is no "invalid email/password" message. BUT if you login with an incorrect login, then you, again get the page reloaded, BUT you also get the "invalid email/pass" message. Point being, it IS checking the login info.

Any suggestions would be helpful. For now I just have SSL disabled.

[michael_s]

This is simply a problem with you configuration somewhere.

First, change your :

define('HTTP_COOKIE_DOMAIN', 'www.petsinstone.com');
define('HTTPS_COOKIE_DOMAIN', 'www.petsinstone.com');

to

define('HTTP_COOKIE_DOMAIN', 'petsinstone.com');
define('HTTPS_COOKIE_DOMAIN', 'petsinstone.com');

This type of thing has been discussed to death. It is simply that your SSL settings are not matching up with what your server wants them to be...

See this:
http://oscdox.com/modules.php?op=mod...p;pagename=SSL

[adam71o]

I'll giv'er a try.

FYI - My SSL certificate is assigned to "www.petsinstone.com" and not just "petsinstone.com" .

[adam71o]

GAH, no progress, this is soooo frustrating.

catalog/includes/configure.php:

<?php
  define('HTTP_SERVER', 'http://www.petsinstone.com'); // eg, http://localhost - should not be empty for productive servers
  define('HTTPS_SERVER', 'https://www.petsinstone.com'); // eg, https://localhost - should not be empty for productive servers
  define('ENABLE_SSL', true); // secure webserver for checkout procedure?
  define('HTTP_COOKIE_DOMAIN', 'www.petsinstone.com');
  define('HTTPS_COOKIE_DOMAIN', 'www.petsinstone.com');
  define('HTTP_COOKIE_PATH', '/store/');
  define('HTTPS_COOKIE_PATH', '/store/');
  define('DIR_WS_HTTP_CATALOG', '/store/');
  define('DIR_WS_HTTPS_CATALOG', '/store/');
  define('DIR_WS_IMAGES', 'images/');
  define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');
  define('DIR_WS_INCLUDES', 'includes/');
  define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');
  define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');
  define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');
  define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');
  define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');

  define('DIR_WS_DOWNLOAD_PUBLIC', 'pub/');
  define('DIR_FS_CATALOG', '/home/richard/public_html/store/');
  define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG . 'download/');
  define('DIR_FS_DOWNLOAD_PUBLIC', DIR_FS_CATALOG . 'pub/');

// define our database connection
  define('DB_SERVER', 'localhost'); // eg, localhost - should not be empty for productive servers
  define('DB_SERVER_USERNAME', 'blah');
  define('DB_SERVER_PASSWORD', 'blah');
  define('DB_DATABASE', 'blah');
  define('USE_PCONNECT', 'false'); // use persistent connections?
  define('STORE_SESSIONS', ''); // leave empty '' for default handler or set to 'mysql'
  // CLR 020605 defines needed for Product Option Type feature.
  define('PRODUCTS_OPTIONS_TYPE_SELECT', 0);
  define('PRODUCTS_OPTIONS_TYPE_TEXT', 1);
  define('PRODUCTS_OPTIONS_TYPE_RADIO', 2);
  define('PRODUCTS_OPTIONS_TYPE_CHECKBOX', 3);
  define('TEXT_PREFIX', 'txt_');
  define('PRODUCTS_OPTIONS_VALUE_TEXT_ID', 0); //Must match id for user defined "TEXT" value in db table TABLE_PRODUCTS_OPTIONS_VALUES
?>

catalog/admin/includes/configure.php:

<?php
  define('HTTP_SERVER', 'http://www.petsinstone.com'); // eg, http://localhost - should not be empty for productive servers
  define('HTTP_CATALOG_SERVER', 'http://www.petsinstone.com');
  define('HTTPS_CATALOG_SERVER', 'https://www.petsinstone.com');
  define('ENABLE_SSL_CATALOG', true); // secure webserver for catalog module
  define('DIR_FS_DOCUMENT_ROOT', '/home/richard/public_html/store/'); // where the pages are located on the server
  define('DIR_WS_ADMIN', '/store/admin/'); // absolute path required
  define('DIR_FS_ADMIN', '/home/richard/public_html/store/admin/'); // absolute pate required
  define('DIR_WS_CATALOG', '/store/'); // absolute path required
  define('DIR_FS_CATALOG', '/home/richard/public_html/store/'); // absolute path required
  define('DIR_WS_IMAGES', 'images/');
  define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');
  define('DIR_WS_CATALOG_IMAGES', DIR_WS_CATALOG . 'images/');
  define('DIR_WS_INCLUDES', 'includes/');
  define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');
  define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');
  define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');
  define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');
  define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');
  define('DIR_WS_CATALOG_LANGUAGES', DIR_WS_CATALOG . 'includes/languages/');
  define('DIR_FS_CATALOG_LANGUAGES', DIR_FS_CATALOG . 'includes/languages/');
  define('DIR_FS_CATALOG_IMAGES', DIR_FS_CATALOG . 'images/');
  define('DIR_FS_CATALOG_MODULES', DIR_FS_CATALOG . 'includes/modules/');
  define('DIR_FS_BACKUP', DIR_FS_ADMIN . 'backups/');

// define our database connection
  define('DB_SERVER', 'localhost'); // eg, localhost - should not be empty for productive servers
  define('DB_SERVER_USERNAME', 'blah');
  define('DB_SERVER_PASSWORD', 'blah');
  define('DB_DATABASE', 'blah');
  define('USE_PCONNECT', 'false'); // use persisstent connections?
  define('STORE_SESSIONS', ''); // leave empty '' for default handler or set to 'mysql'
?>

Any clue whats wrong in here?
To recap - with SSL enabled, it works 7/10 logins. SSL disabled, works period.

[adam71o]

Any ideas? This problem is still not resolved, at the moment I am operating with my SSL certificate disabled, so I could really use some help.

Thanks.

[adam71o]

I have found that DISabling "Recreate Sessions" stops this problem.

So my NEXT question is WHAT IS "Recreate Sessions?"

Is it something that I really should have enabled?