Re: [mv] Checkout weirdness...

["Michael Schwartz" <michael@panamacom.com>]

******    message to minivend-users from "Michael Schwartz" <michael@panamacom.com>     ******

Thanks!  Very useful info.....the problem with my clients is that they
wanted their sites quickly, and the only thing i had ready was a Wildcard
Cert....but i will start the process and get individual certs for all....
Thanks again, i will implement the changes and wait to see if i get feedback
from the end-users...
Regards!

----- Original Message -----
From: Mike Heins <mikeh@minivend.com>
To: <minivend-users@minivend.com>
Sent: Friday, June 02, 2000 1:03 AM
Subject: Re: [mv] Checkout weirdness...


> ******    message to minivend-users from Mike Heins <mikeh@minivend.com>
******
>
> Quoting Michael Schwartz (michael@panamacom.com):
> >
> > I think the problems you are having are similar to mine.....orders are
being
> > recieved, and a 'few' users are complaining....i do have separate
servers
> > for ssl and regular httpd....im using linux red hat 6.0, mv4.04, using
> > cookiedomain i solved the separate ssl server for several catalogs....
> > I really cant figure out the problem.....ill try to get more info and
post
> > it....maybe it will help a lot of people...in the meantime, if you read
the
> > message about cookies, checkout and more....and have an idea, im all
ears
> > (?)
>
> I have been dealing with this one for four years and I am still waiting...
8-)
>
> As far as I can tell, the problem is the splitting of the domains.
> There are situations with proxy servers, cookies, and such that cannot
> be dealt with to my knowledge.
>
> The best I have been able to come up with is:
>
>     1. Use "WideOpen Yes" (catalog.cfg) to ignore the host-qualification
>     Accompany this with "SessionExpire 20 minutes" to make security
>     better.
>     2. Use GET method on the basket form for transitioning to
>     checkout.
>     3. Use the "Mall Yes" (minivend.cfg) directive to cover the case
>     where people get cookies from more than one store on your servers.
>
> What really solves it is getting an SSL cert and keeping everything
> in the same domain. I strongly recommend this to my clients, telling
> them they will easily eat up the cost in consulting time and lost
> business. Trying to save $125 by not buying a cert is a very false
> economy.
>
> Regards,
> Mike
> --
> Internet Robotics, 131 Willow Lane, Floor 2, Oxford, OH  45056
> phone +1.513.523.7621 fax 7501 <mikeh@minivend.com>
>
> Friends don't let friends use Outlook. -- Bob Blaylock
> -
> To unsubscribe from the list, DO NOT REPLY to this message.  Instead, send
> email with 'UNSUBSCRIBE minivend-users' in the body to
Majordomo@minivend.com.
> Archive of past messages: http://www.minivend.com/minivend/minivend-list
>

-
To unsubscribe from the list, DO NOT REPLY to this message.  Instead, send
email with 'UNSUBSCRIBE minivend-users' in the body to Majordomo@minivend.com.
Archive of past messages: http://www.minivend.com/minivend/minivend-list