Loaded Commerce Community

I just went live with my new site . It is a fresh install of SP1 and fresh database. I just got this email after about the 10th order


Basically it preloaded someone else's address for him on the shipping page. I am unable to recreate this problem myself. Any ideas ?

Maybe the computers browser he was using had someone elses address saved in it?

IE and Firefox both automatically fill in forms for you.

You should ask him if he is the only one who uses that computer or ask him for the address that showed and check it against your orders.

he showed me the address and it was someone that previously ordered and from a different state.

maybe one of my sessions settings is wrong ? possible issue with allowing orders without creating and account ?

have you performed any mods to your store?

Are you using file based sessions in the server wide /tmp directory ??

This can cause some issues.

I would encourage an issue report on this type of problem..

David

I have no idea ... how do i check something like that ?

I did file a support ticket.

just SEO and couple others i bought from CRE.

and QBI. quickbooks importer.

Any of them modify the catalog side, other than SEO URL's??

RE sessions directory - check Store Configuration - Sessions menu..

David

This is the list of mods i installed
QBI
CRE Checkout Success Message Module
CRE Checkout Success Banner Module
CRE SEO URL 4.0

This are the defualt options chosen when i set up the cart in the Configuration - Sessions menu..


Session Force Cookie Use False
Check SSL Session ID True
Check User Agent False
Check IP Address False
Prevent Spider Sessions True
Recreate Session False

OK this happened again today.

But this time a customer (Christian) submitted an order and it came up with a different customers account information(Bruce) but his own shipping info...

It's actually like Christian was somehow logged into Bruce's account and changed the shipping address to his own. Christian called me because he was concerned that the account info was all Bruce's , even though it had the right shipping info.

Ok so Bruce emailed me because he was trying to submit an order and he was also having trouble getting it to go through.

I called him but by then he was able to process the order. He said he was trying to submit his order but the cart wouldn't let him because something was wrong with the shipping address. he said it had loaded someone else's address but he couldn't remember who's. We was finally able to submit an order after he changed the address back.

so it looks like this is some type of complication from people trying to submit an order at the same time.

BTW it looks like Christian does not even have an account with us.

I confirmed that christian never had an account with us when he started the check out. Bruce has had an account with us for a while. Seems like they were checking out at very similar times if not at the exact same time.

when i asked christian if he noticed anything odd about the check out he said this.

Check your \includes\configure.php last line should read:



Changing this should resolve the issue.

I have seen a similar issue with the page cache set to on in admin. I could not get to the bottom of it as it was so random but switching the page cache off stopped the problem.

if sessions are stored to mysql, as mentioned above.. and changing Check SSL Session ID True to false doesn't prevent it, you are going to want to get the browser type/version from the last person this is known to happen..

this could be considered a security issue, in only that their personal (shipping address) is being shown to others

never had any luck with creloadeds built in page cache.. but this could easily be an issue