Orders against the wrong customer

[more-solutions]

We've just had an order and enquiry come through a ZenCart site against a customer that they have no connection with. Any suggestions as to where I should look to work our what happened?

Specifically, I have customer A who registered at time of placing an order and has never logged in since (the site confirms this). I then have customer B who ordered but came through as a new address for customer A. We then had visitor C who without registering sent a "contact us" email through the site and that also came through as though it came from A.

[Merlinpa1969]

can you
1. post your session settings from admin-> configuration-> sessions

2. Have you verified where these folks came in from? its possible that they came in
on a link that had a session id ( zenid ) attached to it

[more-solutions]

can you
1. post your session settings from admin-> configuration-> sessions

Session Directory [path to site's docroot]/cache
Cookie Domain True
Force Cookie Use False
Check SSL Session ID False
Check User Agent False
Check IP Address False
Prevent Spider Sessions True
Recreate Session False
IP to Host Conversion Status true

2. Have you verified where these folks came in from? its possible that they came in
on a link that had a session id ( zenid ) attached to it

The customers have no connection to each other that we can determine. We (well our client who owns the site) has talked to them and checked this.

[Vger]

For a website on a shared server you should set Use Cache to false.

You may also be having problems with people coming to the site from a search engine link - that link containing a session id (they both use the same session id). This can happen if you have run the website for a while with Prevent Spiders sessions set to false, but even if you have it set to 'true' then the includes/spiders.txt file needs to be kept updated with the latest spiders. Spiders not in that file will be able to create a sesion id.

The only way of preventing this is if you are able to set 'Force Cookie Use' to true (this places the session id in a cookie - and spiders don't accept cookies). But to use this feature you must either have no ssl at all or a full ssl cert on your site - Force Cookie Use doesn't work with a shared ssl.

Vger

[Merlinpa1969]

well vger as someone who hosts multiple zen cart sites and the ONLY time this has been an issue is when a link has a session ID on it ( as I stated above ) so I would have to disagree with your cache assessment......

More solutions,

They might not have any connectin whatsoever except google,

or a link that is listed on another site....

[Merlinpa1969]

OK well I have just seen another way for this to happen.

In this case the origional designer deleted the customer database after there were already orders,

and now when a new account is created the customer ID matches one thats already in the orders......

so its showing old orders.

[Vger]

Yes, but many start-ups use Pay Pal as their first payment processor - and the duplicate order id won't work with a Pay Pal account because the order will get rejected. This happens many times when people test out their website and then delete test orders before 'going live'.

With regard to cacheing, this can cause problems on a shared server. Even if your 'tmp' or 'cache' folder pathway is unique to your website it may be aliased to a main cache folder on the server. You can even get other website's Categories appearing on your website. That's why it's best not to use caching on a shared server and to always store sessions in the database.

Vger

[Merlinpa1969]

vger please realize that the ONLY thing paypal recieves is the store name

so Please take my word on this, just had to go and fix it this AM......

been around this code for a bit so I am pretty sure I know how it works...

and as regards to caching, BS

nuff said I have over 200 Zen Cart stores running as we speek and NOT a single one of them bleeds over and never have....