Once logged in anyone entering site can order on account!!!

[JemCraft]

I have someone logged into my site and I can add items and remove items from their basket. I have just completed a transaction and then realised that I didn't have to log in as myself, when I checked I had managed to complete the transaction (choosing payment method cheque) using her account??!!

 

What is happening? as soon as someone logs in their account is available for anyone to add and remove stuff from their basket???

 

Please help as I don't even know where to start with this one.

Thanks

 

Jemma

[MoisesZaragoza]

I'm not a expert at that.

and I have not had that problem but look into your sessions.

 

i think that what is

[ozcsys]

How and where are you storing your sessions? If you are not already saving them in the database then try doing that and see if that fixes the problem.

[K3D]

This is happening because you have hard coded osCsid links on your main index.html page. Therefore everyone clicking on one of those links all share the same cart session.

[JemCraft]

Many thanks for your responses - how might I go about fixing it???

[K3D]

To do it properly (without losing carts of people that have cookies disabled) you will need to make the shop the actual front of your website (php instead of html).

 

You will then need to use tep_href_link in order to link to your products so that osCid is written into the URL when necessary.

 

However I would make sure you remove any hardcoded osCid's as a matter of urgency.

 

Your site is suffering quite badly too from speed issues.

[JemCraft]

To do it properly (without losing carts of people that have cookies disabled) you will need to make the shop the actual front of your website (php instead of html).

 

You will then need to use tep_href_link in order to link to your products so that osCid is written into the URL when necessary.

 

However I would make sure you remove any hardcoded osCid's as a matter of urgency.

 

Your site is suffering quite badly too from speed issues.

 

Thank you for responding and for your help so far, however I have no idea how to go about what you have suggested!

 

Would you possibly be able to simplify it for me?

 

Also is there any way of not losing the homepage as it stands, as we have spent ages renewing the gallery and were due to launch it shortly :- (

 

Many thanks in advance

Jemma

[satish]

Thank you for responding and for your help so far, however I have no idea how to go about what you have suggested!

 

Would you possibly be able to simplify it for me?

 

Also is there any way of not losing the homepage as it stands, as we have spent ages renewing the gallery and were due to launch it shortly :- (

 

Many thanks in advance

Jemma

in catalog/includes/configure.php

define('STORE_SESSIONS', ''); // leave empty '' for default handler or set to 'mysql'

change this to

define('STORE_SESSIONS', 'mysql'); // leave empty '' for default handler or set to 'mysql'

 

should solve your issue.

If not do paste your site URL.

 

Satish Mantri

[yanarasod]

hi, i have a drop-down menu, inserted in header.php , using simple html, i havent' used php or tep_href_link, just given a href="" is it going to show any errors. please see this code below:

 

<ul>

<li><a href="../index.php?cPath=21" title="Darjeeling Tea">Darjeeling Tea</a></li>

<li><a href="../index.php?cPath=26" title="Green Tea">Green Tea</a></li>

<li><a href="../index.php?cPath=21" title="Black Tea">Black Tea</a></li>

[choosealogin]

You shoud set up the links like this page.

 

Otherwise, yes - you could have session loss.

 

Test it out...disable cookies in your web browser...start shopping in your store...click...click...add something to your cart....there should be a session id in the address bar now. Now click one of your links you made...chances are if it doesn't use tep_href ...when you click the link your cart will empty

 

hi, i have a drop-down menu, inserted in header.php , using simple html, i havent' used php or tep_href_link, just given a href="" is it going to show any errors. please see this code below:

 

<ul>

<li><a href="../index.php?cPath=21" title="Darjeeling Tea">Darjeeling Tea</a></li>

<li><a href="../index.php?cPath=26" title="Green Tea">Green Tea</a></li>

<li><a href="../index.php?cPath=21" title="Black Tea">Black Tea</a></li>

[yanarasod]

so i must change all the links to php format, but i noticed one thing, whenever i add a item to cart the item appears in red but after refeshing or even coming back to that page , the cart details don't become red again, is it related to this?

[yanarasod]

guess what it just happened i added a few items to cart after disabling cookies and what happened there was actually what you said, my cart became auto-empty, so should i change these links to php now, or i might be running into trouble

[choosealogin]

The red text changing to black in the cart box is normal. :)

 

so i must change all the links to php format, but i noticed one thing, whenever i add a item to cart the item appears in red but after refeshing or even coming back to that page , the cart details don't become red again, is it related to this?

[choosealogin]

Correct. The php link format shown in the knowlege base will fix that, preserving the session.

 

guess what it just happened i added a few items to cart after disabling cookies and what happened there was actually what you said, my cart became auto-empty, so should i change these links to php now, or i might be running into trouble

[yanarasod]

hey can you just convert this piece of code from html to php, i tried but ran into errors, thanks

 

<a class="hide" href="../all_products.php">Our Products</a>

 

<!--[if lte IE 6]>

<a href="../all_products.php">Our Products

<table><tr><td>

<![endif]-->

 

<ul>

<li><a href="../index.php?cPath=21" title="Darjeeling Tea">Darjeeling Tea</a></li>

<li><a href="../index.php?cPath=26" title="Green Tea">Green Tea</a></li>

<li><a href="../index.php?cPath=21" title="Black Tea">Black Tea</a></li>

[JemCraft]

in catalog/includes/configure.php

define('STORE_SESSIONS', ''); // leave empty '' for default handler or set to 'mysql'

change this to

define('STORE_SESSIONS', 'mysql'); // leave empty '' for default handler or set to 'mysql'

 

should solve your issue.

If not do paste your site URL.

 

Satish Mantri

 

Satish, I already have

 

define('STORE_SESSIONS', 'mysql');

 

in catalog/includes/configure.php

 

website is www.jemcraftmemories.com

 

Thanks

Jemma

[satish]

Satish, I already have

 

define('STORE_SESSIONS', 'mysql');

 

in catalog/includes/configure.php

 

website is www.jemcraftmemories.com

 

Thanks

Jemma

I checked your site By creating an account.

Didnt find anything wrong in it.

 

Do give more details.

Satish

[yanarasod]

ok, about my menu, should i define the menu contents in english.php or somewhere else.

[JemCraft]

I checked your site By creating an account.

Didnt find anything wrong in it.

 

Do give more details.

Satish

 

Satish,

 

Thanks for doing that (have deleted your order as presumed you didn't really want the stuff!!!)

 

The problem is still occuring, only now it has got worse, as people who have just created accounts cannot log into their accounts, even though they have only just created them.

 

I have a customer who ordered something and went away fromthe site,then she decidedshe wantedsomething else and came back and tried to log in, but it didn't recognise her e-mail or password. She tried to open a new account and also to checkout without creating an account, but it won';t let her as it says the e-mail address is already registered!!!

 

I have hasa similar problemwhere acustmer couldn't remember her password so requested a new one, but the new ones she is being sent still won't let her access her account???

 

HELP!!!

 

Thanks

Jemma