[mv] *All* users get same Session-ID - fixed, patch included

[Randy Moore <ramoore@axion-it.net>]

******    message to minivend-users from Randy Moore <ramoore@axion-it.net>     ******

Hello all,

I've found & fixed (I believe) the bug that was causing all new visitors to 
get the session ID of the last visitor to checkout.  This may be a Perl 
issue that only affects NT (I can't imagine I'd be the first to notice this 
otherwise).

In the map_cgi subroutine on line 2177 of 'bin/minivend', the line that 
currently says:
     $CGI::query_string = http()->Query;
should be changed to:
     $CGI::query_string = http()->Query || ';;';

When their is no query on the calling URL
(ie 'http://www.mystore.com/cgi-bin/mystore'), the http()->Query routine 
seems to return 'undef' (I believe, $CGI::query_string certainly doesn't 
contain anything at this point).  But, when the map_cgi subroutine returns 
to the dispatch subroutine (which called it), the value of 
$CGI::query_string still contains whatever value it held before the call to 
'map_cgi'.

If the calling URL actually contained a query, the map_cgi function would 
properly set the value of $CGI::query_string (and that value would persist 
outside of map_cgi).

Please let me know if anyone sees a problem with my solution to this.


******    message to minivend-users from Randy Moore 
<ramoore@atlantech.net>     ******

Hi again,

While continuing to investigate this problem, I found that after restarting 
Minivend unique session ID's are being properly created for each visitor 
until someone completes an order.   From then on, everyone gets the session 
ID was used for that completed order.

I'd like to put Minivend into debug mode to try to track this, but the 
'bin/ifdef' script does not seem to work on NT.  Does anyone have a version 
for NT?

Any help or hints here would be very much appreciated.

******    message to minivend-users from Randy Moore 
<ramoore@axion-it.net>     ******

Hi All,

I'm trying to get MiniVend 3.14-5 to work on WinNT (perl 5.005_03 from 
ActiveState) and have run into a major problem.  Every visitor to the site 
is getting the exact same Session ID. Therefore, they share the same 
shopping cart & the billing info for the last person to checkout shows up 
for everyone in the checkout page.

I do NOT have "WideOpen" turned on and I do have Cookies enabled.

This is not the same as the problem I saw in the archives where session 
ID's were getting stored by search engines.  This happens even when I 
manually type the store URL into a browser on a machine that has never 
visited this site before.

I've been able to work around all the other NT weirdness I've run into, but 
this is a major show stopper.

Any help would be very much appreciated.


Randy Moore
Axion Information Technologies, Inc.

email     ramoore@axion-it.net
phone   301-408-1200
fax        301-445-3947
-
To unsubscribe from the list, DO NOT REPLY to this message.  Instead, send
email with 'UNSUBSCRIBE minivend-users' in the body to Majordomo@minivend.com.
Archive of past messages: http://www.minivend.com/minivend/minivend-list


-
To unsubscribe from the list, DO NOT REPLY to this message.  Instead, send
email with 'UNSUBSCRIBE minivend-users' in the body to Majordomo@minivend.com.
Archive of past messages: http://www.minivend.com/minivend/minivend-list


Randy Moore
Axion Information Technologies, Inc.

email     ramoore@axion-it.net
phone   301-408-1200
fax        301-445-3947
-
To unsubscribe from the list, DO NOT REPLY to this message.  Instead, send
email with 'UNSUBSCRIBE minivend-users' in the body to Majordomo@minivend.com.
Archive of past messages: http://www.minivend.com/minivend/minivend-list