Unrelated users sharing sessions

[bill78]

Hello everyone!

 

I have been using an install of osCommerce for a few years without hitch (or upgrade). A problem has occurred twice in the recent months, for the first time as far as I'm aware.

 

What seems to have happened is person A places an order, then person B - unrelated - different IP - comes along and some how ends up with the same session ID, places an order which is assigned to person A's account, but with person B's shipping address.

 

This happened a couple of weeks ago and has just happened again with exactly the same circumstances except this time there is also a person C who also has had their order assigned to person A's account with person C's shipping address.

 

(In the latest occurrence person A is not the same person A as the first case).

 

There is obviously some sort of session issue going wrong, but I'm not sure how to pin it down.

 

Has anyone heard of this problem happening before? or what the solution is?

 

I would appreciate any assistance. Thanks in advance!

[♥geoffreywalton]

Cache and shared servers.

 

Try disabling cache in the osc admin.

[bill78]

Cache and shared servers.

 

Try disabling cache in the osc admin.

 

Hi, thanks for your suggestions.

 

The cache is (and has always been) disabled and the site is on a dedicated server. The IP addresses of the users involved are quite different - not for example the AOL proxy, which is what I first thought.

 

Perplexing :'(