[ic] shost is wrong in bin/interchange and i lost my carts!

jojo@buchonline.net jojo@buchonline.net
Wed, 31 Jan 2001 13:46:56 +0100 (CET)


Hi list,

Ive

- Non-SSL (http://www.mydomain.com...)
- SSL (https://www.mydomain.com...)
- non-cookies cookies is deactivate in my NS
- IC 4.6.1

and lost my carts, if I click the "Place order" button.

-------------snip error------
- - - [31/Januar/2001:13:27:45 +0100] - - START server (3803) (UNIX)
192.168.1.10 QqyiqURV:192.168.1.10 - [31/Januar/2001:13:27:57 +0100] bol /cgi-bin/bol/process.html 
> shost (192.168.1.10) 
> ohost (192.168.1.10) 
> cgisecure (on)
192.168.1.10 bhdxf4oU:192.168.1.10 - [31/Januar/2001:13:28:25 +0100] bol /cgi-bin/bol/search.html 
> shost () 
> ohost (192.168.1.10) 
> cgisecure ()
192.168.1.10 bhdxf4oU:192.168.1.10 - [31/Januar/2001:13:28:33 +0100] bol /cgi-bin/bol/process 
> shost () 
> ohost (192.168.1.10) 
> cgisecure ()
192.168.1.10 bhdxf4oU:192.168.1.10 - [31/Januar/2001:13:28:33 +0100] bol /cgi-bin/bol/scan/os=no/st=text/se=Hund/cs=yes/ml=10.html 
> shost () 
> ohost (192.168.1.10) 
> cgisecure ()
192.168.1.10 bhdxf4oU:192.168.1.10 - [31/Januar/2001:13:28:41 +0100] bol /cgi-bin/bol/ord/infobasket.html 
> shost () 
> ohost (192.168.1.10) 
> cgisecure (on)
192.168.1.10 bhdxf4oU:192.168.1.10 - [31/Januar/2001:13:28:41 +0100] bol /cgi-bin/bol/ord/infobasket.html 
> 1-comparehost ()
192.168.1.10 bhdxf4oU:192.168.1.10 - [31/Januar/2001:13:28:41 +0100] bol /cgi-bin/bol/ord/infobasket.html 
> 1-remoteadd (192.168.1.10)
- - - [31/Januar/2001:13:29:20 +0100] - -  first exit3 EINTR 4 / Interrupted system call Interrupted system call / Terminate =   / 0 PID 3834
192.168.1.10 bhdxf4oU:192.168.1.10 - [31/Januar/2001:13:29:20 +0100] bol /cgi-bin/bol/process.html 
> shost (on) 
> ohost (192.168.1.10) 
> cgisecure (on)
192.168.1.10 bhdxf4oU:192.168.1.10 - [31/Januar/2001:13:29:20 +0100] bol /cgi-bin/bol/process.html 
> 2-comparehost (on)
192.168.1.10 bhdxf4oU:192.168.1.10 - [31/Januar/2001:13:29:20 +0100] bol /cgi-bin/bol/process.html 
> 2-remoteadd (192.168.1.10)
- - - [31/Januar/2001:13:31:54 +0100] - - STOP server (3803) on signal TERM
-------------snip error------

---------snip interchange-------
#jojo
		  ::logGlobal( "\nshost ($Vend::Session->{shost}) \nohost ($Vend::Session->{ohost}) \ncgisecure ($CGI::secure)");
			if( is_retired($sessionid) ) {
				new_session();
				last RESOLVEID;
			}
			my $compare_host	= $CGI::secure
								? ($Vend::Session->{shost})
								: ($Vend::Session->{ohost});

			if(! $compare_host) {
#jojo
		  ::logGlobal( "\n1-comparehost ($compare_host)");
		  ::logGlobal( "\n1-remoteadd ($CGI::remote_addr)");
				new_session() unless $CGI::secure;
				$Vend::Session->{shost} = $CGI::secure;
			}
			elsif ($compare_host ne $CGI::remote_addr) {
#jojo
		  ::logGlobal( "\n2-comparehost ($compare_host)");
		  ::logGlobal( "\n2-remoteadd ($CGI::remote_addr)");
				new_session();
			}
		}
---------snip interchange-------

It seems to me,

$Vend::Session->{shost} = $CGI::secure;

should be as

$Vend::Session->{shost} = $CGI::remote_addr;

and it works well

---------snip error.log----------
- - - [31/Januar/2001:13:32:05 +0100] - - START server (3887) (UNIX)
192.168.1.10 JezMRcqC:192.168.1.10 - [31/Januar/2001:13:32:15 +0100] bol /cgi-bin/bol/search.html 
> shost () 
> ohost (192.168.1.10) 
> cgisecure ()
192.168.1.10 JezMRcqC:192.168.1.10 - [31/Januar/2001:13:32:21 +0100] bol /cgi-bin/bol/process 
> shost () 
> ohost (192.168.1.10) 
> cgisecure ()
192.168.1.10 JezMRcqC:192.168.1.10 - [31/Januar/2001:13:32:21 +0100] bol /cgi-bin/bol/scan/os=no/st=text/se=Hund/cs=yes/ml=10.html 
> shost () 
> ohost (192.168.1.10) 
> cgisecure ()
192.168.1.10 JezMRcqC:192.168.1.10 - [31/Januar/2001:13:32:29 +0100] bol /cgi-bin/bol/ord/infobasket.html 
> shost () 
> ohost (192.168.1.10) 
> cgisecure (on)
192.168.1.10 JezMRcqC:192.168.1.10 - [31/Januar/2001:13:32:29 +0100] bol /cgi-bin/bol/ord/infobasket.html 
> 1-comparehost ()
192.168.1.10 JezMRcqC:192.168.1.10 - [31/Januar/2001:13:32:29 +0100] bol /cgi-bin/bol/ord/infobasket.html 
> 1-remoteadd (192.168.1.10)
192.168.1.10 JezMRcqC:192.168.1.10 - [31/Januar/2001:13:33:02 +0100] bol /cgi-bin/bol/process.html 
> shost (192.168.1.10) 
> ohost (192.168.1.10) 
> cgisecure (on)
192.168.1.10 JezMRcqC:192.168.1.10 - [31/Januar/2001:13:33:04 +0100] bol /cgi-bin/bol/ordjournal/000043-JezMRcqC.html 
> shost (192.168.1.10) 
> ohost (192.168.1.10) 
> cgisecure (on)
---------snip error.log----------

Am I Right? Any comments?

Thanks!

Joachim

-- 
Hans-Joachim Leidinger
buch online                 jojo@buchonline.net
Munscheidstr. 14            FAX: +49 209 1671441
45886 Gelsenkirchen         FAX: 0209 1671441