Order emaisl being sent to wrong customer

I have recently installed ZC on a Win Server for the first time:
ver info:
ZC 1.3.02
PHP Version 4.4.1
Mysql api ver 3.23.49
Windows NT WIN8 5.0 build 2195
register globals is on

Here is the really bad thing that is happening intermittently.
A customer (we will call them A) will order something
he will get the proper order info a good email and the CC numbers will got to the right address.
for the next few orders on the site, A will get the order conformations emails for B, C and . as well as the middle digits (omg) of their CC number as this site is set up for manual cc processing.
The data base entries are also wrong, the customer will come up as A but the shipping info will be for B.
If I turn of ZC ability to send emails this stops happening
there are no mods on this install of zc and I cant see why this would happen.

Help required (please)

Turn on email archiving.
Then install the email archive reader contribution from the downloads->Admin section

Then review the emails that are sent, to see whether Zen Cart is sending to the right destinations, or if your server's mailserver is the problem.

Then I'd test using register globals off ... just in case windows is doing something different there.

So would the file that sets the:
Customer,
Shipping Address,
and the Billing Address
in the database be the safe file that emails it?
Dr. I dont mean to rejeect the help given but this is a live site and I can have emails going to customers not for them. I dont think that is to do the the email, I do thing that is has something to do w/ the session data, as (opps I forgot to mention) when we get thiese over lapping orders they are made in close time to each other.

josh,

PS I have disabled fast cgi

You don't happen to have any ZENID's in any published URL's do you ?

Do you have "recreate session" enabled in Admin->Config->Sessions ?

You don't happen to have any ZENID's in any published URL's do you ?

Do you have "recreate session" enabled in Admin->Config->Sessions ?

Ahaaa the part of the site that I don't control. yes there are session ID there. but recreating sessions is set to a big negitory. but yes I do believe that this makes sense. this is the second stupid question I have had today.

okay.

If there are marketing materials or indexes out there where zenid's have been posted in URL's, and more than one customer comes to that URL within a 24-minute period, both customers will share the same session, the same customer data, the same orders, etc.

Set "recreate session" to "true" and that will force each of those sessions to be rebuilt whenever someone clicks on a zenid.

Unfortunately, there is a bug in some PHP5 versions related to session re-creation, and thus if you're running Zen Cart versions lower than 1.3.0.2, you may not have good success with using "recreate session". Best to upgrade. (I'm mentioning this for sake of future readers, as you already said you're at v1.3.0.2)

Me finding out that there were Zen id's on links to products out side of ZC and getting rid of them, by telling off the site admin worked great.
except that when I set the Recreate Session to true it became a game of random chance whether some one could log on or not. so I make it false and it worked just fine.
still not getting any weird session stuff any more as well.

JOsh