Checkout Problems

[theodin]

Another note: If i click the title of the "Shopping Cart [more]" sidebox, I'm taken to an UNSECURE version of the shopping cart. The unsecure vers. has the correct contents.

Dont know if this is a problem, or by design... I could change the module myself and post the update if necessary...

[theodin]

Another Another note: If I refresh the "Security Check" page, i get the "Whoops! Your session has expired" page. Then I click "home" then try and login again, and I again get the "Security Check" page. Some minutes pass between these page presses (I am writing this message for one thing) but definetly not 24 minutes.

Is it possible to make the login page always come up HTTPS??

[DrByte]

You stated earlier that you have this:
Check SSL Session ID True

Change it to false.

[theodin]

ok: I then have:

Cookie Domain True
Force Cookie Use False
Check SSL Session ID False
Check User Agent False
Check IP Address False
Prevent Spider Sessions True
Recreate Session False
IP to Host Conversion Status False

Is this config dangerous in terms of hack attempts??

Thanks again DrByte....

[DrByte]

There is normally no need to change any of the sessions settings unless your hosting environment requires it (which is seldom).
The only common exception would be the "recreate session" option which most PHP5 installations have a problem with, at least prior to v1.3.0.2 where a hack was implemented to work around a php5 bug.

The defaults are:

Cookie Domain                 True   
Force Cookie Use              False   
Check SSL Session ID          False   
Check User Agent              False   
Check IP Address              False   
Prevent Spider Sessions       True   
Recreate Session              True   
IP to Host Conversion Status  true