Products sometimes add themselves to my shopping cart...

[mrdellano]

Hello,

 

It has come to my attention that products sometimes add themselves to my shopping cart. It doesn't happen often, but when I'm browsing around the site, checking out different pages, I'll notice my shopping cart is full of items I never even clicked on.

 

Someone told me about this a week ago and I just started noticing it myself today.

 

Did I do something wrong, or is this some kind of known bug? I've looked around for answers but I can't seem to find any, which leads me to believe I'm an idiot ;)

 

My site is www.colortoner.com

 

If anyone knows what is going on, please help!

 

- Rich

[natasha21]

i think someone might be using the same session id as you - do you have ssl?

[mrdellano]

i think someone might be using the same session id as you - do you have ssl?

 

Yes, I installed an SSL Certificate about 2 weeks ago.

 

How can I prevent someone from having the same session ID as me?

 

- Rich

[mrdellano]

Yes, I installed an SSL Certificate about 2 weeks ago.

 

How can I prevent someone from having the same session ID as me?

 

- Rich

 

I've searched for answers, and one way to get rid of session IDs is to force cookies, but doing so can supposedly alienate certain customers (like AOL users). I do not want to do this. What can I do to fix this problem?

 

Also, when looking around my site, I noticed that all of the links have an osCsid attributed to them. Can this be what is causing the problems? ex) http://colortoner.com/index.php?cPath=21_40&osCsid=9ea1efc0a1fa319cb982614261d06638

 

I don't know if this information will help, but here is my configure.php file:

 

<?php
// Please, note that all changes in this file will be lost
// after reconfiguring application by Plesk
define('HTTP_SERVER', 'http://colortoner.com');
define('HTTP_CATALOG_SERVER', 'http://colortoner.com');
define('HTTPS_CATALOG_SERVER', 'https://colortoner.com');
define('ENABLE_SSL_CATALOG', 'true');
define('DIR_FS_DOCUMENT_ROOT', 'D:/web/vhosts/colortoner.com/httpdocs');
define('DIR_WS_ADMIN', '/xxxx/');
define('DIR_FS_ADMIN', DIR_FS_DOCUMENT_ROOT . DIR_WS_ADMIN);
define('DIR_WS_CATALOG', '/');
define('DIR_FS_CATALOG', DIR_FS_DOCUMENT_ROOT . DIR_WS_CATALOG);
define('DIR_WS_IMAGES', 'images/');
define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');
define('DIR_WS_CATALOG_IMAGES', DIR_WS_CATALOG . 'images/');
define('DIR_WS_INCLUDES', 'includes/');
define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');
define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');
define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');
define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');
define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');
define('DIR_WS_CATALOG_LANGUAGES', DIR_WS_CATALOG . 'includes/languages/');
define('DIR_FS_CATALOG_LANGUAGES', DIR_FS_CATALOG . 'includes/languages/');
define('DIR_FS_CATALOG_IMAGES', DIR_FS_CATALOG . 'images/');
define('DIR_FS_CATALOG_MODULES', DIR_FS_CATALOG . 'includes/modules/');
define('DIR_FS_BACKUP', DIR_FS_ADMIN . 'backups/');

// define our database connection

define('DB_SERVER', 'localhost:xxxx');
define('DB_SERVER_USERNAME', 'xxxx');
define('DB_SERVER_PASSWORD', 'xxxx');
define('DB_DATABASE', 'xxxx');
define('USE_PCONNECT', 'false');
define('STORE_SESSIONS', 'mysql');
?>

 

Any help would be greatly appreciated!

 

- Rich

[mrdellano]

anyone?