Help - Search - Members - Calendar
Full Version: Admin log in issues
CubeCart Forums > CubeCart Version 3 > Installation & Upgrade Help (Version 3)
That Graphics Guy
Hello,

I am having issues with my admin log in. I can log in sometimes through firefox however I cannot log in via internet explorer. My client cannot log in at all. The password and log in are correct and I haven't changed anything else in the store. It keeps giving him a "admin session was not found" error. We cleaned out the caches and rebooted etc. still errors.

the store is at http://www.suddendeath.com/store
the admin is at http://www.suddendeath.com/store/admin

Here is the globals.

<?php
$glob['rootDir'] = '/home/suddende/public_html/store';
$glob['rootRel'] = '/~suddende/store/';
$glob['storeURL'] = 'http://host424.ipowerweb.com/~suddende/store';
?>

any ideas?
devstudent
I'd love to help you, but obviously there isn't anything I can see, do or reproduce due to the nature of the situation, obviously it would be pretty stupid to post the password or send it to anyone you don't specificly know and trust.

When I go to it in IE and give it a incorrect password it looks like it's actualy checking and working, giving me the message "Login failed. Please try again."

From the source code I can see on your log in page it looks pretty simple and straight forward, I don't see any IE specific issues on that end, and like I said, everything on the publicly accessable end looks to be working.

Where you present the real problem or confusion is in saying sometimes it does work for you in FF, it might have been easier to solve without actualyy seeing it had you said it never works in any browser.

I even went to your home page to take a look at your codeing habits to see if I could gain any clues based on your style of work from that and it looks pretty clean, everything nicely indented and easy to read through, no abuse of trying to make everything Javascript.

The only thing that did immediately stand out to me though was something I had noticed in another cross browser problem here another person was having and unfortuneately never returned to say if what I suggested fixed the issue for them or not, and no one from Cube Cart has commented on what I had posted there, which I was in hopes of getting some type of confirmation, either from Cube Cart staff or the person who was having the problem. It's usualy safe to say when you give a person an answer that works you don't hear back from them. If it doesn't work though they are pretty quick to come back and tell you no that didn't fix my problem, so maybe it worked? or of course, maybe they decided I was a loon and went else where looking for answers?

I'm looking at your one Javascript file your calling on for that log in page "jslibrary.js" it doesn't look like you have edited anything at all in that file from the original, so again I'd suspect others to be reporting the same problems, how ever this one snip of the code found at the bottom continues to stand out to me as being a problem...

CODE
function submitDoc(formName) {
  var obj;

    if (obj=findObj(formName)!=null)
    {
        findObj(formName).submit();
    }
    else
    {
        alert('The form you are attempting to submit called \'' + formName + '\' couldn\'t be found. Please make sure the submitDoc function has the correct id and name.');
    }


The reason it stands out to me is because it seems like I remember reading it being a security issue that was being addressed for cross site scripting problems where Microsoft had located problem signatures to this going all the way back to the development of IE 7 Beta2.

And that is the problem, since this if I remember correctly was an issue that was documented by Microsoft in the Beta 2 release of IE 7, since Beta 2 is no longer around I can't seem to locate the documentation I was thinking I read any longer, which would of answered this question once and for all. It's been driving me nuts, I was looking for that documentation the other day for the other persons issue, maybe my mind is just slipping and I'm completely off in my thinking, that's always possible.

A suggestion I would try, and your lucky that this could be a working fix for you and your client since this is for an admin log in only issue and not an issue for your regular customers. In IE add the domains "host424.ipowerweb.com" and "suddendeath.com" to your trusted sites and turn off all your security settings for them and see what happens.
That Graphics Guy
Wow, thanks a lot for the lengthy reply Devstudent. It certainly makes me want to come back to these forums knowing that there are people like you out there who are willing to help someone out in when they need a hand.

I'm still playing around with the issue. I think MAYBE it might have something to do with the actual www that is generated during the log on process.

Im going to give your suggestions a go and see if it corrects the problem. New problem has popped up hehe.. My client is needing email notifications of purchases.. Ive done some reading on here and see that it is a common issue that will be addressed in the next update. Looking forward to that one... smile.gif

Thanks again Devstudent. I owe you a coffee!

~ Dave
devstudent
I see today someone else brought an old post up on this very issue...

http://www.cubecart.com/site/forums/index....showtopic=24460

It looks like thios problem has been haunting other people since at least going back to December and still no one has resolved it or came up with a working solution. Hopefully changing your browser security settings will work for you as a work around till one of the Cube Cart developers can come up with a solid fix to the problem since it shouldn't have to be that way, and if Microsoft did identify this as a cross site scripting vulnerability as I'm suspecting and disabled it from working in IE 7 intentionaly then it becomes that much more of an issue to see it get fixed in the code for cube cart.
oztinks
I have this problem occassionally and did and jus now relogged in putting www. infront of the domain and all is working again thanks for the sugestions
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.