[CosmeticTattooist]

I have recently experienced a problem where I cant use the "act on behalf of" link in the admin panel to be able to view the front end of the store as if I am one of my customers. Nor can I use the the "view the page as if logged in as the administrator" link when veiwing products and content.

If I use either of those links it just takes me to the front page of the store and I am not logged in and cannot view the information as I should be able to if logged in either as the customer or the administrator.

Any thoughts on what the issue might be?

[JesseLeeStringer]

Mod Security is installed on your server, you need to apply a CS-Cart related whitelist.
Your webhost will need to provide you this service.

[CosmeticTattooist]

JesseLeeStringer, on 02 April 2012 - 03:39 AM, said:

Mod Security is installed on your server, you need to apply a CS-Cart related whitelist.
Your webhost will need to provide you this service.

Thanks for the reply, I have mentioned your suggestion to my host who say that they;
"had the mod_security logs open and as they replicated the issue, nothing came through at all"

Any other suggestions?

[tbirnseth]

I have the same issue and I do NOT run mod_security on my servers. I thought is was just me!

[CosmeticTattooist]

tbirnseth, on 03 April 2012 - 07:47 AM, said:

I have the same issue and I do NOT run mod_security on my servers. I thought is was just me!

CS-Cart support have suggest that it may relate to suhosin module on our host server and I am currently working on trying to isolate the fault.

Edit: I have disabled suhosin module and I still cannot act on behalf of a user.

[JesseLeeStringer]

CosmeticTattooist, on 04 April 2012 - 02:57 AM, said:

CS-Cart support have suggest that it may relate to suhosin module on our host server and I am currently working on trying to isolate the fault.

Edit: I have disabled suhosin module and I still cannot act on behalf of a user.

With suhosin, most of the default setting will provide encrypted cookie sessions. Disabling suhosin won't be of much use to you honestly. If you must, recompile apache without suhosin, with mod_security.

[clips]

We don't really use it much, but "act on behalf of" works fine for us. We are using 2.2.4 and both the community version and pro work fine. This is also on 2 different servers with 2 different host.

[CosmeticTattooist]

Some feedback to the community on this issue.
I have to commend Natalia from CS-cart support for her patience and help with isolating the cause of this issue.
I can confirm that the problem did indeed relate to suhosin module in particular it is the session encrypt setting in the module that is causing the issue, isolation took some time but the fix is quite straigh forward.
All that is required is to add the following line of code without the quotes to your php.ini file in your www directory
"suhosin.session.encrypt = Off"

[johnbol1]

I have a similar issue but it happens with just one user.When I try to act on behalf of I just get erro occured in corner of screen. This user has over 800 orders in his order list so i deleted a load of them in case this was holding it up but still the same and also when the customer (just this one) tries to add to basket it just times out?
Any info appreciated.
( I have submitted a ticket but it is Friday 4pm local UK )
John

[JesseLeeStringer]

johnbol1, on 13 April 2012 - 04:04 PM, said:

I have a similar issue but it happens with just one user.When I try to act on behalf of I just get erro occured in corner of screen. This user has over 800 orders in his order list so i deleted a load of them in case this was holding it up but still the same and also when the customer (just this one) tries to add to basket it just times out?
Any info appreciated.
( I have submitted a ticket but it is Friday 4pm local UK )
John

If you've ever had session encryption, then the customer will need to clear their cookies.
Cookie will validate with CS-Cart, partially which leads to the issue mentioned.

J.

[termalert]

Mine didn't work on my installed cart because
( I assume ) the admin didn't have All privileges.
I edited the Administrator to have ALL privileges
and BINGO !! Act on behalf worked.

[termalert]

STOPPED WORKING AGAIN...lol