View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0006268 | OXID eShop (all versions) | 1.03. Basket, checkout process | public | 2015-11-20 14:05 | 2015-11-26 16:22 |
| Reporter | michael_keiluweit | Assigned To | |||
| Priority | high | Severity | major | Reproducibility | always |
| Status | closed | Resolution | duplicate | ||
| Product Version | 4.9.6 / 5.2.6 | ||||
| Summary | 0006268: Basket of last user is recoverable if the browser session hasn't changed | ||||
| Description | Currently the shop stores the basket content in the browser session (besides the db). If a customer put something in the basket and logging out without purchasing it, the basket will stay, until the browser session is closed. But if another user makes a login, with the same browser session, he gets the basket from user 1. | ||||
| Steps To Reproduce | 1. create 2 accounts 2. login with user 1 3. put something in the basket 4. logout 5. login with user 2 6. have a look at the basket, you have the item from user 1 in it | ||||
| Additional Information | A workaround is possible by overloading the method oxcmp_user::_afterLogout by adding the line $this->getSession()->delBasket(); So the basket will be deleted from the browser session after a logout, but stays in the database, therefore it is recoverable for the user who created it) | ||||
| Tags | No tags attached. | ||||
| Theme | Not defined | ||||
| Browser | Not defined | ||||
| PHP Version | Not defined | ||||
| Database Version | Not defined | ||||