New Customers showing order history from other customers?

3 Oct 2009, 5:46 PM

#1

New Zenner

Join Date:: Mar 2008
Posts:: 8
Plugin Contributions:: 0

New Customers showing order history from other customers?

I have recently installed ZC (The newest version as of the day I installed it about 2 weeks ago) and have noticed that when ever a new customer signs up and then goes to there order history they see an order that does not belong to them.

Is there a database "Cleanup" script or someway to correct this problem within the database?

3 Oct 2009, 5:47 PM

#2

gbensonii

New Zenner

Join Date:: Mar 2008
Posts:: 8
Plugin Contributions:: 0

Re: New Customers showing order history from other customers?

I have also noticed that when i click those same customers in the back office....I can see orders that don't belong to them. Hmmm?

3 Oct 2009, 6:45 PM

#3

drbyte

Sensei

Join Date:: Jan 2004
Posts:: 63,511
Plugin Contributions:: 176

Re: New Customers showing order history from other customers?

Sounds like you've got some session hijacking going on. That's why the default setting in Admin->Configuration->Sessions for Recreate Session is, and should always be, set to TRUE.

Either that or you've got a database where you had a bunch of orders and customers in the database, but you deleted just the customer data but not the order data, or vice-versa, and now you've got all kinds of mismatched records.

.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole

Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

3 Oct 2009, 6:49 PM

#4

gbensonii

New Zenner

Join Date:: Mar 2008
Posts:: 8
Plugin Contributions:: 0

Re: New Customers showing order history from other customers?

The sessions settings are as follows....and they have never been changed.

Session Directory /home/endlesss/public_html/zenshop/cache
Cookie Domain True Info
Force Cookie Use False Info
Check SSL Session ID False Info
Check User Agent False Info
Check IP Address False Info
Prevent Spider Sessions True Info
Recreate Session True Info
IP to Host Conversion Status true Info

3 Oct 2009, 6:58 PM

#5

gbensonii

New Zenner

Join Date:: Mar 2008
Posts:: 8
Plugin Contributions:: 0

Re: New Customers showing order history from other customers?

DrByte:

Either that or you've got a database where you had a bunch of orders and customers in the database, but you deleted just the customer data but not the order data, or vice-versa, and now you've got all kinds of mismatched records.

I believe it is possible that the client may have deleted customer data without deleting order data....assuming that is correct...how do you correct the issue for the future. What i mean is, I would not be concerned with past orders being incorrect, just that it doesn't keep happening with future new customers and orders etc.

Thanks in advance for your help....

3 Oct 2009, 7:24 PM

#6

drbyte

Sensei

Join Date:: Jan 2004
Posts:: 63,511
Plugin Contributions:: 176

Re: New Customers showing order history from other customers?

As a start, you'd have to go and check all the relevant database tables, studying the relationship between them, and making sure that new customers aren't assigned a customer ID that's already been used in an order.
Here's a link to basic summary of database structure: http://www.zen-cart.com/wiki/index.php/Developers_-_Database_Schema

.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole

Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.