Customer receives order confirmaton from other customer...

We have had a bit of an embarrassing problem twice in a week. A new order somehow gets recorded under an existing customer. The shipping and billing adress and all correct paypalinformation are recorded but they are recorded under an existing, different customer, who then receives an order confirmation for an order they did not place. As said earlier, we have had this happen twice now and I am a little afraid it will happen again.

Any thoughts?

What version of Zen Cart?
What version(s) has it been upgraded from?
What addons have you installed?
What customizations have you made to the site?
What version of PHP is your server running?
What version of MySQL is the server running?
What are all your settings in Admin->Configuration->Sessions?
Who is your hosting company?
What is the URL to your site?
How did those customers "find" your site? Were they referred via a link you posted somewhere to encourage them to visit your site? If so, did you post a link that included a "zenid=xxxxxxxxxxx" parameter? If so, that's why customers are getting mixed up. Never post the "&zenid=xxxxxxxxxxxx" part of a URL anywhere.

Zen Cart 1.3.8a
Database Patch Level: 1.3.8
v1.3.8 [2008-05-27 13:51:49] (Version Update 1.3.7->1.3.8)
v1.3.7 [2008-05-27 13:51:20] (Version Update 1.3.6->1.3.7)
v1.3.6 [2008-05-27 13:51:04] (Version Update 1.3.5->1.3.6)
v1.3.5 [2008-05-27 13:50:44] (Version Update 1.3.0.2->1.3.5)
v1.3.0.2 [2008-05-27 13:50:17] (Version Update 1.3.0.1->1.3.0.2)
v1.3.0.1 [2008-05-27 13:49:36] (Version Update 1.3.0->1.3.0.1)
v1.3.0 [2008-05-27 13:48:10] (Version Update 1.2.7->1.3.0)
v1.2.7 [2006-02-20 11:06:10] (Version Update 1.2.6->1.2.7)
v1.2.6 [2006-02-20 11:06:10] (Version Update 1.2.5->1.2.6)
v1.2.5 [2006-02-20 11:06:10] (Version Update 1.2.4->1.2.5)
v1.2.4 [2006-02-20 11:06:08] (Version Update 1.2.3->1.2.4)
v1.2.3 [2005-01-15 15:34:38] (Fresh Installation)
v1.2.2 [2005-01-15 15:34:38] (Zen-Cart Core Files Version Info)

PHP Version 5.2.6

Server Host: spiffy.surpasshosting.com (72.29.75.187) Database Host: localhost (127.0.0.1)
Server OS: Linux 2.6.18-92.1.6.el5 Database: MySQL 5.0.51a-community
Server Date: 10/08/2008 18:47:09 Database Date: 10/08/2008 18:47:09
Server Up Time: 18:47:09 up 66 days, 19:05, 0 users, load average: 0.31, 0.33, 0.34 HTTP Server: Apache/1.3.41 (Unix) mod_log_bytes/1.2 mod_bwlimited/1.4 mod_auth_passthrough/1.8 FrontPage/5.0.2.2635 mod_ssl/2.8.31 OpenSSL/0.9.8b
PHP Version: 5.2.6 (Zend: 2.2.0) PHP Memory Limit: 32M PHP Safe Mode: Off
PHP File Uploads: On Max Size: 2M POST Max Size: 8M
Database Data Size: 5,281 kB Database Index Size: 843 kB

Sessions

Title Value Action
Session Directory /home2/nicolay/public_html/store/cache
Cookie Domain True
Force Cookie Use False
Check SSL Session ID False
Check User Agent False
Check IP Address False
Prevent Spider Sessions True
Recreate Session False
IP to Host Conversion Status true
Session Directory

URL: nicol aym usic .com/store[/url]

and we dont use the zenix=.... links...

I think I may have found the culprit... there's a direct link we placed on our site with a zenid part.... so I'm assuming its that one. Good to know, is that always problematic? Anyways, thanks for the tip.

Nicolay:

I think I may have found the culprit... there's a direct link we placed on our site with a zenid part.... so I'm assuming its that one. Good to know, is that always problematic? Anyways, thanks for the tip.

You'll need to set "Recreate Session = true" if you want the insulate against problems caused by posting zenid URLs.
Be warned that some (few) hosting-server configurations croak with that parameter enabled, resulting in the inability to login. Most servers work fine with it though.

cool i appreciate the tips!