I currently use creloaded but i have a website developer who might build me a new zen cart.

Right now i have an issue with cre that customers can cut and paste a URL into a forum that has the osCsid in it and then anyone who clicks that link at similar times will have the same session ID and have control over each others carts. There is only one time that this pops up in the URL . it is the first link/click after you have reached the site and then it doesn't show up again in the URL.

I read here that all types of OSC derivatives have this issue . Has it been fixed on zen already ? http://www.oshelpers.com/blog/?p=34

If it has been fixed . can anyone tell me the method used to stop this from happening.