Login Loop -- Help Please!!

[mabc]

Hello,

We are having a lot of problems with people unable to login to their accounts recently. They try to login and although they appear logged in within the administrative backend they are taken right back to the login page. Often times the user can sucessfully login using Mozilla Firefox but not IE or Safari. Does anyone have any advice or solutions? This is causing a lot of frustration for our customers.

Thank you in advance for any help you can provide.

[jpf]

Is this for the admin or catalog side?

What editing/customization was done?

Is this a new issue -did it work fine for awhile now not..???

Was something on the server changed?

[mabc]

This is on the catalog side (the end-users/customers are experiencing the problem). We are using Mambo as the CMS for our site.

There has been no code or customizations made to the site. Last week our web server and database were disconnected accidentally when the virtual machines they run on stopped. After the site was brought back up we started getting reports of the problem. The web server was rebuilt and database was restored to the backup that was performed after the accidental shut down. I'm not sure if something in the database could be causing this problem? Perhaps we need to restore to a backup before the the shut down occurred?

We had seen reports of people not being able to log in to their accounts in the past but certainly not like now. Just about everyone is having a problem accessing their customer accounts now.

Thanks again for your help!!

[mabc]

Also, it looks as thought the osc_customers.customers_email_address field is set to blank/null after they attempt to login. Not sure if this is related. We never noticed the customer_email_address field being blank before the log in issues started.

[mabc]

Here is the code from the configure.php file if it helps. The code was created/modified by a consulting company no longer in business.

$mosConfig_live_site = 'http://www.oursite.org';

///------------------------------------------------------///
<?php
/*
osCommerce, Open Source E-Commerce Solutions
osCommerce, Open Source Online Shop E-Commerce Solutions
Copyright (c) 2003 osCommerce
Released under the GNU General Public License
*/
/** ensure this file is being included by a parent file */
defined( '_VALID_MOS' ) or die( 'Direct Access to this location is not allowed.' );
global $mosConfig_absolute_path, $mosConfig_live_site;
global $mosConfig_host, $mosConfig_user, $mosConfig_password, $mosConfig_db;
$server_pos = preg_replace('/^(.+?://)(.+)$/i','$2',$mosConfig_live_site);
$server_pos_base = preg_replace('/^(.+?)/.+$/i','$1',$server_pos);
$server_pos_flag = preg_replace('/^.+?(/.+)$/i','$1',$server_pos);
if ($server_pos_flag == $server_pos_base) { $server_pos_flag = ''; };
if ($server_pos_flag) {
$http_server = $server_pos_base;
} else {
$http_server = $server_pos;
};
// Define the database connection parameters
// eg, localhost - Should NOT be EMPTY
define('DB_SERVER', $mosConfig_host);
define('DB_SERVER_USERNAME', $mosConfig_user);
define('DB_SERVER_PASSWORD', $mosConfig_password);
define('DB_DATABASE', $mosConfig_db);
// 0 = MOS and OSC using different databases ( flags DB reconnects )
// 1 = Using same database as MOS
define('DB_SHARED', 1);
// Prefix for Tables in Database
define('DB_PREFIX', 'osc_');
// Use Persistent connections?
define('USE_PCONNECT', '');
// Database Handler - '' for default handler or 'mysql'
define('STORE_SESSIONS', 'mysql');
// How to Handle Cookies
define('HTTP_COOKIE_DOMAIN', $server_pos);
define('HTTPS_COOKIE_DOMAIN', $server_pos);
define('HTTP_COOKIE_PATH', '/');
define('HTTPS_COOKIE_PATH', '/');

//Unix uses MCRYPT_DEV_RANDOM, Windows uses MCRYPT_RAND
// define('MCRYPT_IV_SOURCE', MCRYPT_DEV_RANDOM);
define('MCRYPT_IV_SOURCE', MCRYPT_DEV_RANDOM);
// define the type of encryption to use
define('FILE_ENCRYPT', 'encryption_tripledes.php');
// define('FILE_ENCRYPT', 'encryption_cleartext.php');

// Define the webserver and path parameters
//
// * DIR_WS_* = Webserver directories (virtual/URL)
// * DIR_FS_* = Filesystem directories (local/physical)
//
define('ENABLE_SSL', true);
// Enable Secure SSL for Catalog
define('ENABLE_SSL_CATALOG', true);
// This is the URL of your ADMIN webserver
define('HTTP_SERVER', 'http://' . $http_server);
define('HTTPS_SERVER', 'https://' . $http_server);
// This is the URL of your PUBLIC Catalog webserver
define('HTTP_CATALOG_SERVER', 'http://' . $http_server);
define('HTTPS_CATALOG_SERVER', 'https://' . $http_server);
// Absolute Server Path to WWW folder
define('DIR_FS_HTTP_ROOT', $mosConfig_absolute_path . '/');
// Relative to Administrator Root
define('DIR_WS_COMPONENT', 'components/com_oscommerce/');
// Absolute Server Path to Administrator Files
define('DIR_FS_ADMIN', DIR_FS_HTTP_ROOT . 'administrator/' . DIR_WS_COMPONENT);
// Absolute Server Path to Catalog Documents
define('DIR_FS_DOCUMENT_ROOT', DIR_FS_HTTP_ROOT . DIR_WS_COMPONENT);
// Absolute Server Path to Catalog Files
define('DIR_FS_CATALOG', DIR_FS_HTTP_ROOT . DIR_WS_COMPONENT);
// Relative Server Path to Administrator Files
define('DIR_WS_ADMIN', $server_pos_flag . '/administrator/');
// Relative Server Path to Catalog Files
define('DIR_WS_CATALOG', $server_pos_flag . '/');

// values for company-specific modifications
/*
* This section should probably be phased out!!!
*/
define('CATID_CELL_LINE', 24) ; //category ID for cell line content items
define('CATID_CELL_LINE_DOCS', 81); // category ID for cell line shipping doc items
define('CATID_CELL_LINE_COAs', 82);
define('SECTIONID_CELL_LINE_COAs', 15);

// category that contains the classes in OSC. Just a coincidence that it's the same number as CATID_CELL_LINE
define('OSC_CLASSES_CATEGORY', 24);

//-- DO NOT MODIFY BELOW THIS LINE -----------------------------------------------------------------------
define('DIR_WS_IMAGES', DIR_WS_COMPONENT . 'images/');
define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');
define('DIR_WS_INCLUDES', DIR_WS_COMPONENT . 'includes/');
define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');
define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');
define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');
define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');
define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');
define('DIR_WS_CATALOG_IMAGES', DIR_WS_CATALOG . DIR_WS_COMPONENT . 'images/');
define('DIR_WS_CATALOG_LANGUAGES', DIR_WS_CATALOG . DIR_WS_COMPONENT . 'includes/languages/');
define('DIR_FS_CATALOG_LANGUAGES', DIR_FS_CATALOG . 'includes/languages/');
define('DIR_FS_CATALOG_IMAGES', DIR_FS_CATALOG . 'images/');
define('DIR_FS_CATALOG_MODULES', DIR_FS_CATALOG . 'includes/modules/');
define('DIR_FS_BACKUP', DIR_FS_ADMIN . 'backups/');
define('LEVEL_HIGH', 3);
define('LEVEL_MEDIUM', 2);
define('LEVEL_LOW', 1);
?>

[jpf]

Your code is heavily modified (mucked up) with and is no longer osCMax standard and without looking at everything they did - I can't comment on what could be wrong with code I have no idea about.

That is why dealing with a person/company that has been around for a while is better than a fly by night company. You know that in a year or several if you have issues you can go back to them.


If it worked before for a while and suddenly your environment changed and now having issues - then it is something with the server. If possible - restore server to prior backup

[mabc]

Thank you for your help troubleshooting.