Bas-64 and Padding is invalid Error

[Rambear]

Hi all,

I'm new to using AbleCommerce (have another store on Miva Merchant since 2002, and all of you are very lucky to be running AbleCommerce, trust me

Anyway, I saw this error in another post from back in August, but didn't really see a solution. I'm getting thousands of this error, in a matter of seconds.

Essentially it's page after page of "Error decrypting data/Padding is invalid and cannot be removed." and for almost every 20 of those, I get one "Error decrypting data/Invalid character in a Base-64 string."

From the other post it appeared ok for me to enter a new random encryption key string, which I've done twice. We are are just now up and about to launch, so I have nothing encrypted (at least is says '0' on the workload when entering a new encryption key) and I don't have days to save set to '0' and Enable Credit Card Storage NOT checked. I'm assuming this isn't all it's encrypting if it's having such difficulty decrypting with nothing in there?

Just would like it sorted before I start marketing the site.

Thank you much for any help.

Barrett
http://www.pinnaclewine.com

My Stats:
PLATFORM: ASP.NET
VERSION: 7.0
BUILD: 10152

AjaxControlToolkit: 1.0.10301.0
CommerceBuilder: 7.0.10139.0
CommerceBuilder.AuthorizeNet: 7.0.9764.0
CommerceBuilder.CanadaPost: 7.0.0.0
CommerceBuilder.CCH: 7.0.0.0
CommerceBuilder.Configuration: 7.0.10102.0
CommerceBuilder.CyberSource: 7.0.9764.0
CommerceBuilder.DataClient.Api: 1.0.0.21
CommerceBuilder.DataClient.Csv: 1.0.0.0
CommerceBuilder.DHL: 7.0.8825.0
CommerceBuilder.ECB: 7.0.0.0
CommerceBuilder.FedEx: 7.0.9725.0
CommerceBuilder.FRBNY: 7.0.0.0
CommerceBuilder.GoogleCheckout: 7.0.10052.0
CommerceBuilder.InternetSecure: 7.0.9764.0
CommerceBuilder.LinkPoint: 7.0.9764.0
CommerceBuilder.Paradata: 7.0.9764.0
CommerceBuilder.PayFlowPro: 7.0.10061.0
CommerceBuilder.PayJunction: 7.0.9764.0
CommerceBuilder.PayPal: 7.0.10071.0
CommerceBuilder.Services: 7.0.9733.0
CommerceBuilder.SkipJack: 7.0.9764.0
CommerceBuilder.UPS: 7.0.10041.0
CommerceBuilder.USPS: 7.0.9728.0
CommerceBuilder.Web: 7.0.9777.0
ComponentArt.Web.UI: 2007.1.1566.3
CyberSource.Base: 2.0.0.0
CyberSource.Clients: 5.0.2.0
CyberSource.Clients.XmlSerializers: 5.0.2.0
CyberSource.WSSecurity: 2.0.0.0
CybsWSSecurityIOP: 1.0.0.0
edtFTPnet: 1.2.4.0
FredCK.FCKeditorV2: 2.5.2912.21007
ICSharpCode.SharpZipLib: 0.85.1.271
LinkPointTransaction: 1.0.1797.29766
log4net: 1.2.10.0
Microsoft.Practices.EnterpriseLibrary.Common: 2.0.0.0
Microsoft.Practices.EnterpriseLibrary.Data: 2.0.0.0
Microsoft.Practices.ObjectBuilder: 1.0.51205.0
Microsoft.Web.Preview: 1.2.61025.0
NVelocity: 7.0.8530.0
PaygatewayNET: 3.0.0.0
paypal_base: 4.2.1.0
PFProCOMLib: 1.0.0.0
PFProdotNET: 0.0.0.0
Validators: 1.0.0.0
WebChart: 1.1.1.6
wwHoverPanel: 1.85.0.0

[batmike]

Do you have HackerSafe/ScanAlert/McAfee Secure running against your site? I've had this problem and tracked it down to the times when McAfee Secure was running. Not sure why it's happening or how to fix it, though I've got a case with AbleCommerce about it so they're working on it.

Hopefully that'll help ...

Mike

[Logan Rhodehamel]

Do you have HackerSafe/ScanAlert/McAfee Secure running against your site? I've had this problem and tracked it down to the times when McAfee Secure was running. Not sure why it's happening or how to fix it, though I've got a case with AbleCommerce about it so they're working on it.

That's an interesting tidbit. I wonder if McAfee is sending invalid values for some form fields. On some pages we track our own "viewstate" in a hidden field - this is encrypted and encoded to prevent tampering.

batmike - What is your case number?

Rambear - are you running such a tool?

[batmike]

Hi Logan,

My case number is 2803.

We've been working on it for a while and with Holiday business it kind of fell out of importance, but I was able to compare the time that McAfee scanned my site to the logs and all the errors occurred at the time the site was being scanned. I can send you some of the logs if you'd like to look at them.

Mike

[Rambear]

I do ineed have Hacker Safe (or McAffee I suppose it is now) running against the site. If you come up with a solution, try post it here and i'll periodically check for it.

Thanks for your help.

Barrett

[cmorganmcp]

I'm running 7.0.1. Has this been resolved with a newer release? Or is there a way to "fix" this in the version I'm running?

-chad

[batmike]

I'm running 7.0.3 and I don't see the massive log piling up that used to come up with this error.

So, if you upgrade, you should be good to go on this problem

Mike

[cmorganmcp]

good to know, thanks