CubeCart Forums > No Administration Session Found

Full Version: No Administration Session Found

CubeCart Forums > CubeCart Version 3 > Installation & Upgrade Help (Version 3)

subten

Apr 18 2007, 09:38 PM

We run 3.0.14 and since using June have had NO problems with the administration panel until very recently (last 2 weeks).

First of all we started getting the security warning message:

QUOTE

Security Warning

Parsed array keys can not contain illegal characters! Script execution has been halted.

It may be possible to fix this error by deleting your browsers cookies and refresh this page.

I was pointed to this post and I applied this fix...

QUOTE(Al @ Oct 30 2006, 02:49 PM)

You can turn off that security function by opening /includes/ini.inc.php

Find:

CODE

$clean = new clean_all($data);

$_GET = $clean->clean_all($_GET);
$_POST = $clean->clean_all($_POST);
$_COOKIE = $clean->clean_all($_COOKIE);
$_REQUEST = $clean->clean_all($_REQUEST);

Replace with:

CODE

/*
$clean = new clean_all($data);

$_GET = $clean->clean_all($_GET);
$_POST = $clean->clean_all($_POST);
$_COOKIE = $clean->clean_all($_COOKIE);
$_REQUEST = $clean->clean_all($_REQUEST);
*/

The function is a hardening measure. This means that it is only an extra measure to prevent potential security issues. It is safe to trun off but we recommend having it on.

There have been a few bugs concerning this and I will release a patch asap.

We no longer get the security warning but REGULARLY (every 7/8 page views) get signed out of the admin panel saying No administration session found.

Is there a solution?

Has anyone had similar problems?

It is REALLY becoming an issue and very annoying. We've a lot of products to add before we go live, hopefully in May.

subten

Apr 20 2007, 11:02 AM

Got problem sorted after purchasing support. Not a cubecart issue but a server issue.

Brivtech

Apr 24 2007, 09:03 PM

Care to enlighten us on what the server issue was? This is something I've seen a few other times, and the solution would be very helpful to other folks.

TimHensel

Apr 24 2007, 09:53 PM

QUOTE(Brivtech @ Apr 24 2007, 10:03 PM)

Care to enlighten us on what the server issue was? This is something I've seen a few other times, and the solution would be very helpful to other folks.

I am running CC3.0.12 without this error.
BUT, I just installed a clean install of the newest 3.0.15 code and now I am getting this error (Only on the version 15 store)!

So if CC3.0.12 and previous versions never had this error, but newer versions of the CC do have this:
Parsed array keys can not contain illegal characters error ... What is the difference...CC software.
I'm running my normal 3.0.12 store just fine with the Parsed Security Warning ... Yet it suddenly shows up on the installed 3.0.15 test store.

subten

Apr 26 2007, 01:54 PM

QUOTE(Brivtech @ Apr 24 2007, 10:03 PM)

Care to enlighten us on what the server issue was? This is something I've seen a few other times, and the solution would be very helpful to other folks.

Certainly... here is the article Al added to the knowledge base about it...

QUOTE

It is caused by Apache web server restarting every time an account holder make a change such as adding a domain or subdomain. Apache reboots clearing the /tmp folder on the server. As a result ALL session data on the server is lost and everyone is booted out.

There is a solution in some circumstances.

For Media Temple customers you can open your incldues/ini.inc.php file and add one line of code to change the session save path.

CODE

ini_set("session.save_path","/home/{YOUR ACCOUNT NUMBER}/data/tmp");

This can be put anywhere in your ini.inc.php file replacing {YOUR ACCOUNT NUMBER} with your account number.

If you are not a Media Temple customer please contact your hosting company to see if there is an alternative path is available to use or you may wish to specify your own path to a writable folder.

Hope this helps. We've not had any problems since this code was added.

This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.