I am running OS Commerce on two seperate sites on the same server. Both sites use the OSC Affiliate contribution. I also have a lot of the same affiliates on both sites. Today one of my affiliates notified me that he could log into his affiliate account on one site, then change the url to the other site and be logged into another affiliate's account on that other site. He could then edit the affiliates info, see their reports, etc.
I also tried to do it with a customer account and luckily it seems to only be possible with the affiliate log in.
Any suggestions? It sounds like a cookie or session issue to me, but I wanted to get some other opinions as this could also be affecting many of you. Thanks.