bikinipro Posted September 21, 2009 Posted September 21, 2009 Hi, I asked this before, but the suggestions so far haven't worked. When I send out a mass email and a lot of my customers order at once, this happens. After a person completes their checkout and another one logs on, it shows up as the previous persons account and they're afraid to order. I called the 800 number, and the answer I got is below....but I don't have $300.00 and they said it could cost more... Can someone PLEASE help me!!! We are dealing with more and more web sites that are having the same issues that you are having and the cost of looking into the individual problems is going up to $300. It is no fault of your’s , but there are a lot of variables with the software that is causing this. It lies with the configuration setup steps that are over looked for the most part, that are now coming into the light, from previous web designers that took short cuts in setting up stores for their clients.
bradybarrows Posted September 21, 2009 Posted September 21, 2009 Hi,I asked this before, but the suggestions so far haven't worked. When I send out a mass email and a lot of my customers order at once, this happens. After a person completes their checkout and another one logs on, it shows up as the previous persons account and they're afraid to order. I called the 800 number, and the answer I got is below....but I don't have $300.00 and they said it could cost more... Can someone PLEASE help me!!! We are dealing with more and more web sites that are having the same issues that you are having and the cost of looking into the individual problems is going up to $300. It is no fault of your’s , but there are a lot of variables with the software that is causing this. It lies with the configuration setup steps that are over looked for the most part, that are now coming into the light, from previous web designers that took short cuts in setting up stores for their clients. First off, do you have all the security features implemented on your cart mentioned at this pinned topic? http://www.oscommerce.com/forums/index.php?showtopic=340995
BryceJr Posted September 21, 2009 Posted September 21, 2009 Usually the problem you're experiencing can be fixed by setting your sessions. Click >>here
bikinipro Posted September 22, 2009 Author Posted September 22, 2009 Usually the problem you're experiencing can be fixed by setting your sessions. Click >>here Bryce, Thank you very much. I went in and change the prevent spiders session, but I don't have Regenerate Session ID listed! These are my choices and I tried the force cookies use to true and that was a disaster. The customers were able to checkout, but I never received their order! Any more suggestions? Thanks! Title Value Action Session Directory /tmp Force Cookie Use False Info Check SSL Session ID False Info Check User Agent False Info Check IP Address False Info Prevent Spider Sessions True Info Recreate Session
BryceJr Posted September 22, 2009 Posted September 22, 2009 Sorry for the confusion. Prevent Spider Sessions >> True Recreate Session >> True
BryceJr Posted September 22, 2009 Posted September 22, 2009 Addendum: Force Cookie Use - tells the user to enable to accept cookies in their browsers because your store will be reading and writing session information on it. By default install, IE, Firefox, Safari, and Opera are set to accept cookies. If I log in to your store, my browser will keep a cookie of my session. Since I have the cookie, I have the session, nobody else. For that to work properly, these must be configured in your /includes/ configure.php file. define('HTTP_COOKIE_DOMAIN', ''); define('HTTPS_COOKIE_DOMAIN', ''); define('HTTP_COOKIE_PATH', ''); define('HTTPS_COOKIE_PATH', ''); The customers were able to checkout, but I never received their order! This is most likely unrelated to Force cookie use in the sessions. This could be something else.
bikinipro Posted September 22, 2009 Author Posted September 22, 2009 Addendum:Force Cookie Use - tells the user to enable to accept cookies in their browsers because your store will be reading and writing session information on it. By default install, IE, Firefox, Safari, and Opera are set to accept cookies. If I log in to your store, my browser will keep a cookie of my session. Since I have the cookie, I have the session, nobody else. For that to work properly, these must be configured in your /includes/ configure.php file. define('HTTP_COOKIE_DOMAIN', ''); define('HTTPS_COOKIE_DOMAIN', ''); define('HTTP_COOKIE_PATH', ''); define('HTTPS_COOKIE_PATH', ''); This is most likely unrelated to Force cookie use in the sessions. This could be something else. Thanks! I'll try the recreate session... It's funny, because as soon as I turned the cookies back to false, I'm able to get the customers order again....
bikinipro Posted September 25, 2009 Author Posted September 25, 2009 Thanks! I'll try the recreate session...It's funny, because as soon as I turned the cookies back to false, I'm able to get the customers order again.... Ugh....still happening. Any more ideas please?
BryceJr Posted September 26, 2009 Posted September 26, 2009 Ugh....still happening. Any more ideas please? Usually, the ones I mentioned above would have sufficed. Still, keep these sessions TRUE. These will work in conjunction with the next one. Prevent Spider Sessions >> True Recreate Session >> True This next one is a bit extreme. If your customers saved something in their account for later purchasing, they'll lose it. If they are logged in, they will be logged out. Anything in their basket will disappear. Watch the "Who's Online" tool in the osc admin panel. Perform this task when your store has the least number of customers and not in the process of checking out. 1. Log into phpMyAdmin 2. Select your database and search for the SESSIONS table. 3. Click browse 4. You'll see a column with alphanumeric entries under sesskey. 5. On the left of every row is a checkbox. Check them all or just click "Check ALL". 6. On the bottom part is a red "X" mark. It's the symbol for delete. 7. Click that. You'll confirm the deletion. All sessions are now deleted. New sessions will be created and in conjunction with the above sessions set to true, you shouldn't have any problems. When you send mass email to your customers, DO NOT include the session ID (osCsid=abcdefg12tree9u5dlk2). Here are some screenshots to aid you.
New 
Recommended Posts
Archived
This topic is now archived and is closed to further replies.