Security issues in Zencart login.

[rhmanish4]

I have just upgraded my version of zencart and is facing problems in login.I have added security tokens in all login pages.But still there is error while login.Please help me out.

PSD to XHTML (http://www.css4me.com)

[gidmanuk]

If you have customized template "login" files, the new security features need to be merged into your customized template files.

The following files are affected:
- /includes/templates/YOUR_TEMPLATE/templates/tpl_login_default.php
- /includes/templates/YOUR_TEMPLATE/templates/tpl_timeout_default.php

And if you're encountering it in your Admin area, this file is affected as well:
- /admin/login.php

The exact changes needed may vary from release to release, but most likely you will need only add the following after every occurence of the password field (zen_draw_password_field function)
<?php echo zen_draw_hidden_field('securityToken', $_SESSION['securityToken']); ?>


Additionally, if you have customized your /includes/functions/sessions.php file for some reason, you'll also need to merge the new changes for this core file into your customized version.

[Kali]

Hi friends I am newbie here. I am happy to be a part of this forum. There are many security issues in which Zencart login is one. This platform gives us a huge knowledge about security issues.

[NolanBrian]

Welcome dear here..

[Manov]

Hi Kali,
Hearty Welcome to you!!
Does your problem solved rhmanish?

[sea queen]

Don't worry it will solved able.