[ic] Wrong items shown in email confirmation and excrypted order

[Mike Heins]

Quoting Curt Hauge (chc@mninter.net):
> I entered his original order using his login info from my browser without a
> failure. This cat has received several hundred orders since August 2001 and
> no major problems reported (other than a few orders came through with $0
> shipping charges - still unknown and not reproduceable).
> 
> I have not been expiring sessions regularly. Could this cause the problem?

Not likely. It would be expired. I think the most likely explanation is
user error, but if it is repeated we should take a look at it. The fact
that the current code has taken thousands upon thousands of orders
without a similar report and only one user reporting makes user error
extremely likely.

If I had to guess a possible error that didn't include a simple mistake
by the user, it would be two separate sessions and a submission of the
wrong one.

> My /session directory is full of folders, but no info in them.

This is normal. The directories are not removed by expiration.

> My /tmp
> directory appears to have the sessions in it. Is this being used for
> sessions instead?

Not unless you have "SessionDatabase tmp" somewhere. What you probably
see is the retired and ip_counter stuff.

-- 
Red Hat, Inc., (emailing wirelessly from my laptop, on Perl Whirl
in the Caribbean Ocean) Geek Cruises (www.GeekCruises.com)
phone +1.513.523.7621 fax 7501 <mheins@redhat.com>

Be patient. God isn't finished with me yet.  -- unknown