Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeDNN Open Source...DNN Open Source...Module ForumsModule ForumsStoreStoreBug:  User can add items to cart without being logged inBug: User can add items to cart without being logged in
Previous
 
Next
New Post
10/26/2009 12:23 AM
 

All,

I've detected that a user can add items their cart (they actually add items to the last person logged in's cart) when they're not logged in.  Instead of bouncing the user directly to the login page when adding items it simply lets them do it.  If you select the buy now button, then it properly sends the user to the login screen.

 

Jeremy

 
New Post
10/26/2009 9:39 AM
 

Hi Jeremy,

It's normal! The Store module use a session cookie to store the GUID cart. This value allow to retreive the content car from the db. If you do not close you browser or if you simulate another user (logged or not) with the same browser on the same computer, then you share the same content cart! To simulate two users, you have to use two different browsers (IE, FF) on the same comptuter or use several computers.

Gilles


We (team members) are Humans offering their knowledge, their work and their spare time FOR FREE to benefit the community. It would be so particularly appreciated that your messages begin with "Hello" and end with "Thank you" or any other form of politeness. Ask yourself what your reaction would be, if you were approached by me (a total stranger) on the street to ask you something without saying "Hello" nor "Thank you"? After several years of services dedicated to the community, I begin to be tired to read requests without any form of politeness.
 
New Post
10/26/2009 11:44 AM
 

When the user hits the logout button, shouldn't the session be ended?  This doesn't sound right to me.  What if 2 people share the same computer and want to purchase something from the same website?  And what if they want to do it back to back? 

 

Jeremy

 
New Post
10/26/2009 12:53 PM
 

Hi Jeremy,

No the session cookie is maintened and cleared by the browser, the Store module "clear" the cart db and session GUID cart only when the user validate his order at checkout. In this case the content cart is used to create the corresponding order, then the content cart is cleared. If two users share the same computer, the first one have to close his browser to clear the session cookie, then the second user retreive an empty cart. This is how the session cookie is maintened by browser not by the Store module. The content cart is loosed if a visitor do not validate his order, this is why we use cookie session to preserve user's privacy.

Gilles


We (team members) are Humans offering their knowledge, their work and their spare time FOR FREE to benefit the community. It would be so particularly appreciated that your messages begin with "Hello" and end with "Thank you" or any other form of politeness. Ask yourself what your reaction would be, if you were approached by me (a total stranger) on the street to ask you something without saying "Hello" nor "Thank you"? After several years of services dedicated to the community, I begin to be tired to read requests without any form of politeness.
 
New Post
10/26/2009 1:11 PM
 

Ok,

I was thinking that when a user attempts to add an item to their cart, the application could check to see if they're logged in and if they're not then force them to login.  Wouldn't that be the safest course of action? 

Like you said, the store is critical and everything has to be perfect.  If one user can add items to another user's cart, then that would be a big problem.

 
Previous
 
Next
HomeHomeDNN Open Source...DNN Open Source...Module ForumsModule ForumsStoreStoreBug:  User can add items to cart without being logged inBug: User can add items to cart without being logged in


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out