someone else's details in address book?

[trillian]

A strange thing has begun to happen.

When a new customer opens an account, there is an entry already in the address book showing someone else's
name and address details in addition to their own !

I had a customer report this to me so I tried opening a new account myself and saw the same thing, as soon
as it showed the address book there is a stranger's details already in 'my' address book below my details. As if I had already entered
another name and address in the book but this is a brand new account.

I cannot see anywhere in the admin area where you can view or edit address book entries either.

'Any ideas?

[ElSlozzo]

Hi trillian,
Yeah that needs fixing before someone calls privacy violation on you. Check phpmyadmin for the details and find out if the rogue new entries are the most recently added. It could be the customers_address_book_id values and address_book_id's are not in sync and hence pulling wrong data. What about updates are they affected, do you update other people's address when you change the wrong entries in YOUR address book entry?
Obvious things to check would be latest version of zen-cart, if there have been any changes to address_book pages, and whether or (hopefully) not someone has manually deleted a record from the database causing this inconsistancy. Like an entry in the address_book or customers tables.

[ElSlozzo]

Oh, and forgot to mention: in admin go to Customers >> Customers. In the list of customers on the 2nd column from the left is address book entries, also a hyperlink, "1 of 1" and "1 of 3" to let you view address book entries. click on "1 of 1"

[teresa529]

A strange thing has begun to happen.

When a new customer opens an account, there is an entry already in the address book showing someone else's
name and address details in addition to their own !

I had a customer report this to me so I tried opening a new account myself and saw the same thing, as soon
as it showed the address book there is a stranger's details already in 'my' address book below my details. As if I had already entered
another name and address in the book but this is a brand new account.

I cannot see anywhere in the admin area where you can view or edit address book entries either.

'Any ideas?

The customer numbers need to be entirely different. We had the same problem. The solution is to start your customer numbers at a higher point than they were before. We re-set our customer number at 4000 (higher than our previous customer number) and the problem stopped. If 2 customers are assigned the same number, they can see each others information.
Teresa

[Vger]

This is most often caused by running your site with "Prevent Spider Sessions" set to false, or else using an outdated spiders.txt file. This will allow search engines to create links with session ids in them. If two separate people click on the same link then customer B can end up in the customer A account and vice versa.

To help prevent this install a full ssl certificate and set "Force Cookie Use" to true, and also Recreate Sessions - so that the session id changes when switching from http to https pages.

Vger