Login causes cart to empty

[dragonkeeper1973]

Quick Note: If this post is in the wrong place will Admin please correct?

My problem is that I have noticed as I have been trying to get my site put together that when testing I run into the following problem:

As a Guest I browse what products I have posted and add one to the cart. After it goes to the cart I click checkout and it prompts to login or create a new account. When doing either it causes the cart to empty during the change from non-secure to secure.

Is this a config issue or is there code that needs to be fixed?

the store is located at osCMax v2.0 : DWM Computers On-Line Store
if anyone would like to take a look at see what the problem could be.

I am trying to get things up and going full swing now that I am fully licenced.


Thank you for your help in advance.

[met00]

here is the problem

cart: Cart Contents : osCMax v2.0

login: https://secure.bluehost.com/~pcprogr...dadfc7f9a53d1a

as you can see, you're not on the same host, so the osCid you are picking up is NOT from the host where there is a shopping cart associated to the osCid for the cart.

Think of it this way. When you create the cart as a guest it creates and osCid which it passes back and forth as a cookie. This cookie is on the first host. When you move to the login on the HTTPS it is going to a different host, so it creates a cookie on that host. That cookie knows nothing about the cookie on the HTTP host, therefore the cart is empty now.

Thus the cart contents are "dropped".

The solution is to properly set up the HTTPS so that it is going through the correct host (https://shop.dwmcomputers.com/login.php). This should be done at the includes/configure.php level.

[dragonkeeper1973]

That's partly what I thought but I wasn't sure. Because of settings that are availe with my hoster, I have the HTTPS set the only way I can at this time ( I am working on getting things changed). Is there a temp work around that I could use untill changes with my host take place?

[jpf]

You have a shared SSL which works fine with OSC - but you have to store session data in MYSQL (set in both your configure.php files) and not files and also try to set "force cookies" sessions in the admin

[dragonkeeper1973]

I've check the settings in the configure.php(both) have session data set to msql. I tried setting force cookie use and got a Cookie Usage warning page. I then double checked my browser setting and all was as it should be but still kept getting the Cookie Usage.

Any other suggestions as to what it could be and ways that I could resolve it?

I have thought about posting a note on the front page to the customer but how would that look? oh, the horror.