View Issue Details
ID | Project | Category | View Status | Date Submitted | Last Update |
---|---|---|---|---|---|
0006268 | OXID eShop (all versions) | 1.03. Basket, checkout process | public | 2015-11-20 14:05 | 2015-11-26 16:22 |
Reporter | michael_keiluweit | Assigned To | |||
Priority | high | Severity | major | Reproducibility | always |
Status | closed | Resolution | duplicate | ||
Product Version | 4.9.6 / 5.2.6 | ||||
Summary | 0006268: Basket of last user is recoverable if the browser session hasn't changed | ||||
Description | Currently the shop stores the basket content in the browser session (besides the db). If a customer put something in the basket and logging out without purchasing it, the basket will stay, until the browser session is closed. But if another user makes a login, with the same browser session, he gets the basket from user 1. | ||||
Steps To Reproduce | 1. create 2 accounts 2. login with user 1 3. put something in the basket 4. logout 5. login with user 2 6. have a look at the basket, you have the item from user 1 in it | ||||
Additional Information | A workaround is possible by overloading the method oxcmp_user::_afterLogout by adding the line $this->getSession()->delBasket(); So the basket will be deleted from the browser session after a logout, but stays in the database, therefore it is recoverable for the user who created it) | ||||
Tags | No tags attached. | ||||
Theme | Not defined | ||||
Browser | Not defined | ||||
PHP Version | Not defined | ||||
Database Version | Not defined | ||||