Version 3.0.3.7 Timezone Issue

I have seen in the forum that if the admin changes the timezone from the default UTC, you then cannot log in to the admin control panel. The fix proposed by some is to manually edit a table in the database. This is hardly a good fix and I am reluctant to do this as I have limited experience doing so.

Would like to see a more practical fix ... perhaps something like provide a replacement for the table in database and not ask users to edit the existing. Or perhaps an official instructions from OpenCart developers on how to fix this.

After a frustrating time, I found the issue and performed a full reinstall and now I have the knowledge not to change the time zone.

How many other bugs are there in this release that one needs to be wary of?

Steve

As stated in this post. viewtopic.php?f=201&t=222369&start=20#p816440
The best option is to set the system/config/default.php timezone to match what you selected in store settings config_timezone. https://github.com/opencart/opencart/bl ... lt.php#L14

To quickly fix so the issue didn't happen would be to remove the following changes and just use the setting in system/config/default.php.
https://github.com/opencart/opencart/co ... 5aac13d699
https://github.com/opencart/opencart/co ... 5a566ffeab
https://github.com/opencart/opencart/co ... 26d47f1277
https://github.com/opencart/opencart/co ... c99e7899bf
https://github.com/opencart/opencart/co ... 224db82ce0

To do a full fix you would have to change the startup order so that the settings were processed before the session was started, as has been done in the master branch on GitHub.

As for other bugs to look out for.

Cache control. Can cause issues for customers. Also allows browsers, etc. to store sensitive data as plain text in their caches. So quite important to comply with data privacy laws.
viewtopic.php?f=202&t=206449

Duplicate items in cart.
viewtopic.php?t=211273

Sessions aren't deleted from the database.
https://github.com/opencart/opencart/issues/7094

No support the the cookie samesite attribute. Which will cause the session to be lost on return from some payment gateways.

Old versions of some payment modules used undoing bug fixes and a security patch.
https://github.com/opencart/opencart/pull/8164

Also recently found issues with some payment modules. Hopefully fixes released soon.

Customer accounts CSRF issues. Looks like this is finally being looked at in the master branch.
https://github.com/opencart/opencart/co ... 72ba759f48

Probably a lot of other minor issues as well.