vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   Modification Graveyard (https://vborg.vbsupport.ru/forumdisplay.php?f=224)
-   -   Major Additions - microCART: Shopping System for vB4 (https://vborg.vbsupport.ru/showthread.php?t=256723)

micheal332001 01-17-2011 05:26 AM

Quote:

Originally Posted by Smiler2009 (Post 2150323)
Hi all,

Ok, we went live with the shop last night and within 20 minutes had an email titled URGENT...URGENT...URGENT from a user saying that when he went on the eshop, there were other users details already in the cart complete with their orders. When he tried a second time a different set of details were in the cart complete with their order. He finished off by saying he would be reporting me to the UK Data Protection Registrar (which is nice). When I logged into the eshop, sure enough there was a new set of data from another user already filled in and seven items (accumulated from the others I presume) in the cart.

Nothing like this came out in our testing but it was just local i.e. my wife and I on separate machines but the same IP address. Luckily this all happened very late at night and I managed to disable the shop before too many users had tried it, fortunately no-one had then gone on to Paypal and tried to pay so I won't be looking at refunds at least.

Has anyone else seen anything like this or can shed any light on it?


Feature Request:- A big red "shut the shop" button, preferably easy to find ;)

Regards, Jeff.

Hi there

i have tryed to make this happen and cannot make this problem show its self to me.
Can you please let me know where the other users details showen was it just in the cart or was the users address info someone elses.

Please give as much info as you can so that i can fix this problem if there is a problem.

Smiler2009 01-17-2011 04:45 PM

Hi Micheal,

I think what happened is that one of our members entered the e-shop, added an item and then went to checkout, filled in their address details etc and then went to preview the order , probably to get an idea of postage cost but then crucially, never made payment.

The next user comes along and does the same but when they go to checkout, the first users name and details are already filled in and the basket contains the first and second users items and so on. Because of this they just jump out of the e-shop and back to the forum. Next user gets the previous users details and on it goes.

I saw it for myself when the problem was reported to me, I logged in on my wifes machine and went to buy an item, when I clicked on checkout, the guys address etc. was already in the boxes and there were seven items in the cart.

As I say, both my wife and I tested and tested over the last week and could not make this happen, it only started when we went live.

My wife and I are the only admins, we have no moderators.

I allowed access to all groups.

Is this enough info, if you need more just ask.

Regards, Jeff.

Smiler2009 01-17-2011 05:07 PM

Micheal,

I think I found the problem.

My wife and I are both Admins, everyone else are in four groups:

Registered Users
Lurkers
Inactive members
FOMS

As soon as the other groups were enabled the problem arose.

It seems that if a member of one group goes onto the shop and then a member from a different group goes on after, the problem occurs.

We have just replicated this by adding a new member, "test user" with the usergroup FOMS as the primary group.

I as an Admin go onto the site, order an item and then quit to the forum prior to the payment

I log out and then back in as "test user", go to the shop, and my basket already has one item, I order an item, when I go to checkout, my details (address etc.) from the previous session are there.

I change the details to match fictional details of "test user" and then quit out to the forum.

My wife logs in on her machine as Admin, goes to the shop and there are already two items in the cart. She buys an item and on going to checkout, "test user" details are in the boxes and there are now three items in the cart.

If just my wife and I (Admins) buy items, the system works as it should, only when a different usergroup is introduced does the problem arise. Also, in a panic, when the problem was reported, the fastest way to stop the shop was simply to disable it, when I re-enabled it, the cart was cleared.

That is exactly what we are seeing here, hope this helps.

Regards, Jeff.

Smiler2009 01-17-2011 07:02 PM

Micheal,

For some reason and I don't know why, the "inactive user" group we created caused the problem. I've stopped access to the eshop from that group and all seems fine again.

Sorry for the panic

Jeff.

janaf 01-18-2011 04:35 PM

Hi,

Just installeed Microcart and would like to test drive and gradually replace my old shop. I would like to to disable the header tab. Can I do that via ACP or do I need to delete the code for the tab?

Thanks

Lomak 01-18-2011 06:30 PM

Quote:

Originally Posted by janaf (Post 2151006)
Hi,

Just installeed Microcart and would like to test drive and gradually replace my old shop. I would like to to disable the header tab. Can I do that via ACP or do I need to delete the code for the tab?

Thanks

You can disable this until you are ready via the ACP.


'Plugins & Products' -> Manage Plugins'

Look for:

Product : microCART

Then untick

microCART: Tab Menu

And Save


Hope this helps

janaf 01-18-2011 07:44 PM

Thanks!

janaf 01-18-2011 07:51 PM

Now I get three error messages

Deprecated: Assigning the return value of new by reference is deprecated in /.../forums/cart.php on line 342

Deprecated: Assigning the return value of new by reference is deprecated in /.../forums/cart.php on line 1971

Deprecated: Assigning the return value of new by reference is deprecated in /.../forums/cart.php on line 2069

Any ideas?

Lomak 01-18-2011 09:45 PM

Really sorry, You may have to wait for Michael.

Have you customised anything yet

Does it go back to normal if you re-tick the plugin?

_ The only reason I responded is because I know Michael may not be around till Wednesday

ckgreenman 01-19-2011 02:19 PM

Quote:

Originally Posted by Lomak (Post 2151164)
_ The only reason I responded is because I know Michael may not be around till Wednesday

Ahhh. I was wondering if he'd gone away for a few days, :)


All times are GMT. The time now is 08:42 PM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01774 seconds
  • Memory Usage 1,747KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (3)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (4)pagenav_pagelink
  • (2)pagenav_pagelinkrel
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (10)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete