Jump to content
  • Checkout
  • Login
  • Get in touch

osCommerce

The e-commerce.

PLEASE HELP SECURITY ISSUE!!!!


Guest

Recommended Posts

Posted

I am trying to get my site up and have been testing it. When I go to the site, the last customer is still logged on!! If you go to my site, you can see Welcome sabrina and all my order information...not welcome guest!!

 

My site is Aromatic Escapes

 

Can someone please help me fix this? I have searched the forums but came up empty....

 

Or is there a phone # to osCommerce that I can call for help???

Posted

I don't see this problem. Likely the test cookie of the store maintains your personal info and it's stored in your local system. Just click logout and should be ok.

Posted
I don't see this problem. Likely the test cookie of the store maintains your personal info and it's stored in your local system. Just click logout and should be ok.

 

 

Thank you for your reply! Ever notice how you can work for days on a problem and then when you ask for help it hits you? That was one of those times...

 

This may help others who have this problem:

 

I found a similar problem in the Bug Reports that was unresolved. Someone had mentioned that the person may have external links

 

"Is it possible that customers are clicking external links into the site with a session id? This happens with a lot of copy and pasted urls in emails or newsletters. Verify all external links to your site do not have the osCsid appended to the url."

 

My redirect had an osCsid. I had recently changed it because of digital certificate issues. Anyway, I changed it back without the url that I had copied and pasted and now it is working fine.

 

I hope this helps someone else... :)

Posted

check your sessions settings make sure that

osc Admin->Configuration->Sessions->Prevent Spider Sessions is set to true.

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...