Session Permission Denied

[spagift]

Hi I have been developing a site with no problems until I installed the SSL side of things. The site is hosted on unix, and everytime I go to checkout I get the error

A General Script Error Occurred

--------------------------------------------------------------------------------
Error: Error opening ../../public_html/spatest/acatalog/host81Z128Z76Z179ZinZaddrZbtopenworldZcomA1062688650B20891.session (Permission denied)
--------------------------------------------------------------------------------
Press the Browser back button and try again or contact the site owner

The .session files permissions are set at 200 when I view them on the server. I have contacted my host and they do not understand why Actinic cannot access the .session file.

This was working fine before I installed the SSL,

The paths are correct and the test comes back correct.

Any help would be most appreciated as I'm sure its a simple problem.

Thanks

Maj

[rmladden]

I had something like this happen years ago. CGI from SSL was not running under the same user/group as non-SSL. I did not persue it beyond adding chmod statements to my CGI to make the files available. When I switched ISP's I did not have the problem. It may had something to do with shared SSL at the time. I do not share SSL anymore.

Bob Ladden

[spagift]

Thanks for your reply, I think that it may be something to do with this although actinic should control CHMOD for the file, but if there are any specific cases anyone knows where they found a solution I would really appreciate it. I am running behind schedule because of this and im certain its something simple!!!!

My ssl is not shared so I should not have this kind of problem.

Any suggestions appreciated.

Cheers

Maj

[Ben]

Hi Maj

Could you post the URL where this error occurs. It sounds like it could be an issue with the ownership of the script files.

Ben

[spagift]

Sure,

http://www.spagift.co.uk/spatest/aca...kages.php?id=3

Click on buy gift voucher now. Then goto checkout. Then the error appears

Thanks

Maj

[Ben]

For some reason the secure cgi scripts cannot modify the session files which have been created by the non-secure cgi scripts. I think the problem is due to the scripts in the secure cgi-bin having a different ownership to those in the non-secure (original) cgi-bin. You can check this with an ftp client.

If this is true, you can work around it by doing two things. Firstly, create two new text custom properties in Advanced | Custom Properties - ACT_CART_PERMISSIONS_LOCK and ACT_CART_PERMISSIONS_UNLOCK. In Design | Options | Site Defaults, add the 2 CUSTOMVAR's to the Properties list. Set the value for ACT_CART_PERMISSIONS_LOCK to '0220' and ACT_CART_PERMISSIONS_UNLOCK to '0660'. For both CUSTOMVARs, untick 'Searchable' and 'File Name', tick 'Use as CUSTOMVAR'.

Secondly, find Session.pm in your site directory and open it in Notepad. Search for 'sub unlock' and a few lines down you will see ...

chmod $sMode, $sFile;

Change this to ...

chod oct($sMode), $sFile;

Save the file and exit.

Update the site and try to place a dummy order. If you get the same error, set the values for the CUSTOMVARs at 0222 and 0666 respectively and re-upload.