two users, within seconds of each other, swapped saved addre

[bkgca]

I had a call from a user of our store, he had processed an order, and it went through fine, the email receipt reflected all his correct information.
BUT later when he went back in to check on his account, and checked his shipping address that was saved, it was someone else's , including phone number.
I looked up that person, and their registration time was within seconds of each other.

I've contacted the other person, have not heard back yet. From what I've gotten from the first person, the 2nd persons address and such should be fine (unless there is a 3rd person involved) , but wont be sure till I hear back from them.

So how could this have happened that the orders went through with the correct info (as demonstrated by the email receipts ) but the store saved information from another user that as one line at the same time ?


edit, the registration was within seconds of each other, the orders were placed 30 minutes apart.

[robm]

Check your customer registration links on your pages for "sign-in/register". If these links on static html pages include the query parameter "sbid=SSMSB..." this will link everyone to a single session. That could be the issue here.

We have a blog post (section at the end) that explains how to properly format these links if you set them up manually:
http://www.lexiconn.com/blog/2010/08/shopsite-customer-registration/

Rob

[bkgca]

Check your customer registration links on your pages for "sign-in/register". If these links on static html pages include the query parameter "sbid=SSMSB..." this will link everyone to a single session. That could be the issue here.

We have a blog post (section at the end) that explains how to properly format these links if you set them up manually:
http://www.lexiconn.com/blog/2010/08/shopsite-customer-registration/

Rob

tnx, I'll take a look.

The only place I have links to log in, that I added, is on the "home" page of the store itself, one of the pages of the shopsite.
IIRC, I had used the links that are available / generated for reference within a utility of the store's back office..
it's been a few years since I created the "home" page, so pardon me if I'm a tad off, but that's as I remember it... need to look into it.

If that is what I had used, would it have the query parameter you referenced?

TIA !!!
Bob

[robm]

Bob,

If you used the links from the backoffice, they should be fine. However, sometimes merchants use a link they find on the cart page for signing-in / registering, and this would not be correct.

I'd also recommend upgrading ShopSite to the latest version to eliminate the possibility of a bug from an older version.

Rob

[bkgca]

Bob,

If you used the links from the backoffice, they should be fine. However, sometimes merchants use a link they find on the cart page for signing-in / registering, and this would not be correct.

I'd also recommend upgrading ShopSite to the latest version to eliminate the possibility of a bug from an older version.

Rob

Rob Tnx...

sometimes merchants use a link they find on the cart page for signing-in / registering, and this would not be correct.

you mean if they copied a link they found on one of the shopsite pages.... and than pasted that code into some other webpage ???

if so, nope, I didn't do that , used only the code provided in the back office to place a login link on the store home page, and that was the only login I provided , all others are as provided by the shopsite theme.

this is the first instance of such a problem.

to be VERY honest, been in fear of updating to the latest version.... not sure how it would effect many of the tweaked templates (footers / headers to display certain items like the Certs , SSL and such) .

we are at " Pro 10 sp2 r2.4 "

but for this strange instance, it's been running great..... and the old addage, if it aint broke don't fix it comes to mind every time I've upgraded other content managers and than tweaks and addons fall apart and things stop working......
And with new "customers" signing on each day, nearly each hour, I just didn't want to chance it.
just last week 350 new customers.
I'd get hung by the board if it broke cause I was updating to a newer revision, " just to do so "....
During our yearly renewal season, thought this year I'd have to upgrade to a better level of server hosting, but not a glitch or slowdown.

[robm]

I guess it could have been a glitch then. Sounds like your links are ok. Just double check them to make sure the sbid= part is not present in the link on your homepage.

Per upgrading, I agree if things are going well, and you don't need the new features, no sense in rocking the boat.

We've upgraded hundreds of merchants from v10 to v11 with very little issues, as everything is normally backwards compatible. You can always have your host make a backup of ShopSite before the upgrade so that you can easily roll back if things go awry.

Rob
LexiConn

[bkgca]

I guess it could have been a glitch then. Sounds like your links are ok. Just double check them to make sure the sbid= part is not present in the link on your homepage.

Per upgrading, I agree if things are going well, and you don't need the new features, no sense in rocking the boat.

We've upgraded hundreds of merchants from v10 to v11 with very little issues, as everything is normally backwards compatible. You can always have your host make a backup of ShopSite before the upgrade so that you can easily roll back if things go awry.

Rob
LexiConn

Rob , again thnx a whole bunch.

I don't see it..

here's the script...

Code: Select all

<script type="text/javascript" language="JavaScript">
function DisplayLogName(name) {
  var cookies=document.cookie;
  var start = cookies.indexOf(name + "=");
  var name = "";
  var start1;
  var end1;
  var tmp;
  var signed_in = -1;

  if (start != -1) {
    start = cookies.indexOf("=", start) +1;
    var end = cookies.indexOf("|", start);
    if (end != -1) {
      signed_in = cookies.indexOf("|yes", start);
      name = unescape(cookies.substring(start,end-1));
      document.write("<b>" + name + "</b>");
      if (signed_in != -1) {
        document.write("<br>");
        document.write("•<a href=\"http://www.YYYYYY.org/cgi-sys/cgiwrap/YYY/sc/order.cgi?func=3&storeid=*16658078a03292a424d2a96f6a&html_reg=html\">View/Edit Account</a>");
        document.write("<br>");
        document.write("• <a href=\"http://www.YYYYYY.org/cgi-sys/cgiwrap/YYY/sc/order.cgi?func=4&storeid=*16658078a03292a424d2a96f6a&html_reg=html\">Sign Out</a>");
        document.write("<br>");
      }
      else
      {
        document.write(" - You are no longer signed in<br>");
      }
    }
  }
  if (signed_in == -1) {
    document.write("• New Customer? <a href=\"http://www.YYYYYY.org/cgi-sys/cgiwrap/YYY/sc/order.cgi?func=1&storeid=*16658078a03292a424d2a96f6a&html_reg=html\">Click here to Register</a>");
    document.write("<br>");
    document.write("• Returning Customer? <a href=\"http://www.YYYYYY.org/cgi-sys/cgiwrap/YYY/sc/order.cgi?func=2&storeid=*16658078a03292a424d2a96f6a&html_reg=html\">Click here to Sign In</a>");
    document.write("<br>");
  }
}
DisplayLogName("ss_reg_0001YYYYYY");
</SCRIPT>

[robm]

Bob,

If that's the code, then you're good to go. That's the stock JavaScript code.

Rob

[bkgca]

Bob,

If that's the code, then you're good to go. That's the stock JavaScript code.

Rob

yup went into the back office, and copied it when in the "edit page content".

GREAT, tnx for the info and looksee...