Jump to content
  • Checkout
  • Login
  • Get in touch

osCommerce

The e-commerce.

MAJOR BUG: Orders Mixed up


Guest

Recommended Posts

Posted

This is a major security flaw and now I am considering removing this shopping cart from my website. If 2 customers are attempting to order at the same time, the first customer logged in will be okay, but the second customer logged in will not get information back on the order, because the order will go to the first customer with the first customer being listed as the customer on the invoice, but Biiling and Shipping information will be okay for the second customer. The right credit cards are being charged, but the information on the invoice is incorrect.

 

This causes a major headache with the customer and they think that their order did not go through and that they are being charged for the other order on their credit card from the first customer.

 

This must be a problem with simultaneous users and I am afraid if my business gets really successful that I will not be able to process simultaneous orders.

 

Is there an update for this problem? Please let me know. I am also entering this as a bug.

 

Thank you and please help.

 

Frank

Posted

Do a search I recall seeing this before don't recall the solution tho

Rolf

Posted

Check /catalog/includes/configure.php

 

Make sure this line is set like so:

 

define('STORE_SESSIONS', 'mysql');

 

There were some other possible solutions suggested here as well but can't recall them off-hand.

Posted

Problem solved

 

The link (URL) I used to go to my shopping cart had a session ID included. I got rid of the session ID, so that the same people would not use the same session ID.

 

I tried to turn on FORCE COOKIES in the administration tools under cache or configuration, but that causes customers to get confused and it did not work, because I reset my settings to medium and I still got the same message and could not log in.

 

So, I turned FORCE COOKIES back to false, but I turned GENERATE NEW SESSION at login TRUE.

 

With this setup, everything seems to be working okay.

 

Thank you for all your help.

 

SQAGEEK

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...