address and customer data error? Session Variable problem?

[hard_hook]

Orders are coming in and the shipping and billing information is wrong. It was entered right during checkout but somewhere in the process it is picking up another address. This is not on every order.

 

Looking in the admin area it looks like the new customer is actually "taking over" or replacing an existing customer and that information is being passed.

 

An order came in with MY test shipping address in it. I immediately went into the admin area and I was no longer a customer in the system. This other person who put in a legit order was now customer #2. His shipping information was correct however it was still my billing address???

 

 

Is this a bug? Something with session variables? We're at a loss but obviously this is a major problem.

thank for any help. We're using Verisign PayFlow Link also.

[♥Vger]

You're probanly suffering from people coming to your site from search engines and using the same session id - which has been spidered.

 

You need to make sure that 'Prevent Spider Sessions' is set to 'true' in your osC admin panel, under Configuration --> Sessions. Then you need to update the includes/spiders.txt file with the one that is kept up to date in Contributions.

 

Finally, because you'll have this problem for some time, also in Sessions you need to set Recreate Session to 'true' so that a new session id is created when people Login or Create An Account.

 

There's also a newish contribution which strips session ids out of links when people come to your site from known spiders - but I haven't used this myself so can't recommend it.

 

Vger