Customer login doesn't work
The answer is that your theme does not supply a variable called form_key
.
Just as stated above I have to add:
<input type="hidden" name="form_key" value="<?php echo Mage::getSingleton('core/session')->getFormKey(); ?>" />
you add it right after <ul class="form-list">
to each one of my login.phtml
files for the theme.
You may also have problems with update quantity of cart items
Here is the importance of form_keys
:
Since the beginning of time, Magento's backend contained a form key that protected against XSS attacks [1]. With Magento 1.8 the form key has entered the frontend for pretty much the same reason: to protect against form submission from another website, using your browser. a malicious attacker can add stuff to your cart while you're in a different browser tab or even complete an order for you. This relies on predictable URLs, because the site will not have access to the actual HTML content in the browser tab where you have your Magento order waiting. Everything sent to the Magento store will however submit your cookies and thus use your session.
By adding a unique key to each form or to each link that generates an action on the server, the URL or form content becomes no longer predictable. The form key is stored in the session data and validated upon submission to the server. If they don't match, you get a form key error and the action is not completed.
Source: http://magento.stackexchange.com/questions/31933/customer-login-doesnt-work-in-1-9
======================================================================
"Your web server is configured incorrectly. As a result, configuration files with sensitive information are accessible from the outside. Please contact your hosting provider." message on dashboard
The message prompt you that your www.domain.com/app/etc/local.xml, which store DB string, is exposed to public.
Mostly likely that AllowOverride option is not set to All on Apache/Nginx conf file, hence .htaccess rule on web root couldn't take effect.
=====================================================================
Magento place order button not responding
It could be your info.phtml in your theme file not compatible with Magento version installed.
Solution: replace theme checkout info.html file with default info.html
i.e. cp ./app/design/frontend/base/default/template/checkout/onepage/review/info.phtml ./app/design/frontend/THEME/default/template/checkout/onepage/review/info.phtml
=====================================================================
Magento plugin file turned into directory
You received plugin file from software developer, and applied to via connect manager. You see installation success message.
After log out and re-login, new sub-section you expected to see in Configuration module is not there. Upon check web code, you found out that some new add file are added as folder instead of file. i.e. *.php
Solution: double check your plugin file, make sure it's .tgz file and not tgz.gz file. If it's tgz.gz file, try decompress it by running gunzip -d filename.tgz.gz.
Manual delete files added and re-install the plugin again.