PRIVACY ISSUE

[abepe]

I have a problem with osCommerce where a customer has logged into their account using their email address and password but has actually been logged into somebody else's account, displaying a different greeting name and giving them access to somebody else's address details etc.

 

The site is not setup with SSL and only uses the Phone/Fax credit card/cheque details contribution as a payment method.

 

Has anybody ever had this problem before?

 

Any help is much appreciated!

[Iggy]

In your /includes/configure.php are sessions being stored in /tmp or mysql?

 

define('STORE_SESSIONS', 'mysql'); // leave empty '' for default handler or set to 'mysql'

 

Iggy

[abepe]

They are being stored in mysql

[Iggy]

I'll defer to someone else then as that's usually a problem with sessions being stored in the same dir for multiple sites.

 

Iggy

[abepe]

Thankyou,

 

Any help is much appreciated!