Appearing Logged In As Another Customer

[Fordy4]

Hi,

 

I am seeing reports of people following a link into my store and seeing themselves logged in as another customer, this is obviously a potentially very serious problem.

 

Is this something anyone else has experienced?

 

The link they are coming from looks ok (I realise that the store reports that it is now not found as it is out of stock, incidentally is there any way of displaying something a bit better than title not found in this situation??)...

 

http://rootedrecords.co.uk/catalog/product...products_id=649

 

The forum which has posted the link is here, see the complaints on the second page.

 

http://www.dubstepforum.com/viewtopic.php?t=20846

 

Any help would be much appreciated, I am using osCommerce 2.2-MS2

 

Cheers!

[Guest]

set the prevent spiders sessions to true and install the session regeneration

http://www.oscommerce.com/community/contributions,4112

[Fordy4]

set the prevent spiders sessions to true and install the session regeneration

http://www.oscommerce.com/community/contributions,4112

 

Many thanks I'll give it a try.

[satish]

Will explain how this happens:

 

Look if a spider has grabbed your url along with a session id.

 

Now if different people use that then this session is shared across hence resulting in different people able to c thru.

 

Satish