Cart is Automaically Adding Product and Customers Share Same ZEN ID

[rugged951]

I've had an interesting thing start happening. Customers everywhere (at random and not always) are getting items added to their shopping cart that they didn't add. It just loads into the shopping cart when browsing the website. I've personally experienced it myself with my co-workers and also noticed we all have the same ZEN I.D. in the URL when this occurs.

I'm not sure where this would originate from or how to track it down. Any possible direction on diagnosing the issue would be helpful! Thank you in advance!


USING: ZC 1.5.4
PHP: 5.4.45

[mc12345678]

Having shared a link with a zenid is the typical method that others/everyone ends up with the same, and the observed events are exactly what will happen. Basically everyone that has that same zenid (no matter what it is) is sharing the same cart. So someone else adds a product, you see it, you add (or delete) a product they see that event as well...

Some have had to resort to modifying their code to use a different parameter so that no-one would have a zenid that could be used, because zenid would not...

But, then there is the issue of how you when say typing in your uri could possibly have the same zenid as anyone else (in the grand scheme of things), that's a different issue...

[rugged951]

Good input, but I can confirm it's not a "shared link" issue. I have customers around the country calling about the problem. It's quite literally as if 20 people at any given time have the same shopping cart and if someone somewhere adds or removes the item, the others see that. Again, not everyone is experiencing it, but it is a new and sudden issue.

Not knowing enough about coding, I was wondering if it had anything to do with SSL or htaccess settings, but if so, why now?

I am working with a programmer right now to resolve it, but I thought this would be the best place for input as we're still trying to figure it out.

[mc12345678]

What are your settings for sessions under the configuration section?

I seem to recall that there is likely related server session information under the version info section also, but it's been a long time since I've seen this issue and am trying to search on related info now.

[rugged951]

Here's my current settings:

Session Directory - XXXX/htdocs/cache (XXXX my host)
Cookie Domain - TRUE
Cookie Domain True Info
Force Cookie Use False
Check SSL Session ID False
Check User Agent False
Check IP Address False
Prevent Spider Sessions True
Recreate Session True
IP to Host Conversion Status true
Use root path for cookie path False
Add period prefix to cookie domain True

[mc12345678]

Does the session directory exist? What are the permission settings on it?

[rugged951]

Yes, it exists on the server.

Current CHMOD settings are 777 for the cache folder.

I'm only seeing 5 files in there if it matters; an htaccess, an index file, and 3 sess_ files.

All are a year old, give or take a bit.

[mc12345678]

Are other directories set to 777 or are they 755?

What are the session settings in the includes/configure.php file.

[mc12345678]

Any/most recent error logs as found in the ZC logs directory?

[mc12345678]

Other thing not yet directly asked for: in admin if you can get to it, upper right corner, version link. In the lower area should be a section about sessions. Please post the contents of that, obscuring whatever path information that may seem necessary.

This appears to overall be a php session related issue and that information ought to provide information that will be helpful.