Payment Slam = lost cart. Intentional or no?

[DTomlinson]

When there are too many payment attempts (failures), the code
sends the customer to a TIMEOUT PAGE after destroying the session.

Is it intentional to also destroy the contents of the shopping cart?

The timeout page indicates that the cart has been saved, however carts that could easily have a hundred items in them are forever lost.

I'm not understanding the reasoning behind destroying the cart also, but I do know
why sending to a timeout and requiring a new login.

Dan
www.beadfx.com

[DrByte]

Ya, it was written that way intentionally because if someone's slamming cards then destroying the cart requires yet another step to put something in the cart before they can begin checkout with fake cards again.

Why are your customers regularly putting in invalid card numbers more than 5 times in a row?

[RodG]

Good question, but I don't think that there would be a definitive answer, because it would (I suspect) depend on how far the processing got to before whatever caused the timeout occurred.

Under normal conditions, yes it is normal for the cart contents to be destroyed after the payment. Customers would get quite confused (and even annoyed) otherwise.

A timeout isn't 'normal conditions' though so all bets are off, so rather than worry about what to expect, you should be far more concerned about the cause of the timeouts in the 1st place.

Just my view.

Cheers
RodG

ps. As usual, DrBytes response (posted while I was writing mine) is almost certainly the more accurate answer.

[lat9]

Ya, it was written that way intentionally because if someone's slamming cards then destroying the cart requires yet another step to put something in the cart before they can begin checkout with fake cards again.

Why are your customers regularly putting in invalid card numbers more than 5 times in a row?

Just a note that on Zen Cart 1.5.5b, this operation occurs after 3 (not 5) failed checkout attempts.

[DTomlinson]

I'll agree for many sites that this is good and probably the best way for most public websites.

However anyone working with CC companies who have strict address checking -
and MoneyMart's handing out prepaid cards with wrong addresses and zip codes is a nightmare!

It should be there, but it should be a disable-able option IMO

Dan

[DrByte]

If you want to have it keep the cart, you can comment-out line 40 in includes/modules/checkout_process.php:

  $_SESSION['cart']->reset(TRUE);