osCsid issue ?

**snarkys** · 31 Mar 2008, 06:12 PM

I currently use creloaded but i have a website developer who might build me a new zen cart.

Right now i have an issue with cre that customers can cut and paste a URL into a forum that has the osCsid in it and then anyone who clicks that link at similar times will have the same session ID and have control over each others carts. There is only one time that this pops up in the URL . it is the first link/click after you have reached the site and then it doesn't show up again in the URL.

I read here that all types of OSC derivatives have this issue . Has it been fixed on zen already ? http://www.oshelpers.com/blog/?p=34

If it has been fixed . can anyone tell me the method used to stop this from happening.

**Kim** · 31 Mar 2008, 07:28 PM

Uh - we don't support CRE or osCommerce. You need to report the problem to them.

**Merlinpa1969** · 31 Mar 2008, 07:31 PM

Zen Cart has set it so that you can require a new session ID upon entering, even if you are coming in from a link that has the zenid

**snarkys** · 31 Mar 2008, 08:20 PM

Originally Posted by Kim

Uh - we don't support CRE or osCommerce. You need to report the problem to them.

ya i wasn't asking for support really . I just want to make sure that zen didn't have the same issue since i am probably going to pay someone to build a zen cart for me and that article says that all osc derivatives have that issue.

clearly that isn't the case. Thank you for both of your time : )