Re: [mv] session being dropped in cookie less checkout

[jojo@buchonline.net]

******    message to minivend-users from jojo@buchonline.net     ******

On 24 May, Mark Stosberg wrote:
> ******    message to minivend-users from Mark Stosberg <mark@summersault.com>     ******
> 
> 
> Hello! I'm using MV 4.04 on FreeBSD 3.1 and I have a question about
> checking out without cookies. This looked to be a classic FAQ case of
> losing the session when the switch to SSL happens. So I added this to my catalog.cfg:
> 
> DomainTail   No
> IpHead       Yes
> SessionExpire  10 minutes
> WideOpen       Yes
> 
> and ran 'reconfig' to put them into effect. 
> 
> However, in the 'simple' multipage checkout, I lose the session between
> checkout.html and final.html
> 
> Could part of the problem be the the store is at:
> 
> virtdom.com 
> 
> and the checkout is at:
> secure.isp.com/~virtdomuser  ?
> 
> Their IP addresses are in the same range (the rightmost block varies).
> 
> I double checked the forms to make sure the session variable was being
> passed through. 
> 
> error.log appears to have nothing to say about the matter.
> 
> Any ideas on this one friends?
> 
>   Thanks,
> 
>     -mark

I think, without cookies, MV are not able to make a right direction to
the right session, if there are two or more MV handle one session. What
happen, if you add a line like

<INPUT TYPE=hidden NAME="mv_session_id" VALUE="[data session id]">

or

<FORM METHOD=post ACTION="http://__SERVER_NAME__/cgi-bin/yourshop/ord/checkout.html?[data session id]">

or
	[if type=explicit compare="q{[read-cookie MV_SESSION_ID]}"]
		<!-- All is copacetic, got a cookie. -->
	[elsif scratch tried]
		[set message]
			You must have cookies set to leave the basket.
			Check out now or forever lose your shopping cart.
		[/set]

	[/elsif]
	[else]
		[set tried]1[/set]
		[bounce href="[area bounce]"]
	[/else]
	[/if]



in both sides? I use an external databases to allow visitor to search
for any items, to order this items and I get this via post methode. In
both case, I have to post the MV session id to the external database
and I get the same session id via post methode back.

I´ve no experience with secure server, which has not the same domain
name as my own domain. But I see the problem often. Maybe you have read
the FQA too fast? If I remembered right, there are an answer anywhere
in FQA or mail archivs.

Good lucks!

Regards,

	Joachim

-- 
Hans-Joachim Leidinger
buch online                 jojo@buchonline.net
Munscheidstr. 14            FAX: +49 209 1671449
45886 Gelsenkirchen         FAX: 0209 1671449

-
To unsubscribe from the list, DO NOT REPLY to this message.  Instead, send
email with 'UNSUBSCRIBE minivend-users' in the body to Majordomo@minivend.com.
Archive of past messages: http://www.minivend.com/minivend/minivend-list