Jump to content

roseybud

Members
  • Content count

    56
  • Joined

  • Last visited

Profile Information

  1. I have recently moved my website to a different server. Now when I try to upload a file using the upload feature in the "file upload as an option feature" contribution I get the error message Error: destination (/usr/local/bin/images/uploads/) does not exist. I can't find anything in my scripts pointing to /usr/local/bin/. The folders images/uploads do exist. Can anyone advise where I should be looking to correct the problem, perhaps in the configuration? The site is working correctly otherwise which would suggest the configure files are OK. Thanks in advance.
  2. roseybud

    Purchase without Account

    Everything is working fine with the following exception: After I confirm order, then begin the order process again by adding items to cart and then clicking on checkout, I am taken immediately to the checkout shipping page with the previous customer's information. This information has not been cleared for the previous customer. <{POST_SNAPBACK}> I have had similar issues with this contribution, finally resulting in one customer sending a cheque to another! If you find a fix please let me know as I have now had to remove this contibution from my sites.
  3. I have recently moved my website to a different server. Now when I try to upload a file using the upload feature I get the error message Error: destination (/usr/local/bin/images/uploads/) does not exist. I can't find anything in my scripts pointing to /usr/local/bin/. The folders images/uploads do exist. Can anyone advise where I should be looking to correct the problem, perhaps in the configuration? The site is working correctly otherwise which would suggest the configure files are OK. Thanks in advance.
  4. As I see it, although getting rid of the account buttons for PWA customers will stop customers seeing someone elses account details, this would not necessarily solve the problem of customers orders somehow became attached to Mrs X's account because she hadn't logged out.
  5. Hi, thanks for the quick reply. Sessions is already set to mysql as I read somewhere about that too. Rosey
  6. Well, I had an interesting problem today, which I thought you may be interested in hearing about. Mrs X (an existing account holder) e-mailed me today to ask if the order process e-mails she had received had been sent in error. She had placed an order yesterday, but no more orders. Just before that I received two orders from non-account holders which appeared to be from Mrs X, although the invoice and delivery addresses were different to Mrs X'x address. So I went into the website, and clicked on My Account and the set up account page showed as normal. That was OK but then I added something to my basket and clicked on My Account and sure enough I went straight into Mrs X's account! From Mrs X's account I could all her personal information and the two later orders that had been placed completely independently, (one who had paid via paypal and the other who was going to call with a credit card, so two different methods). I removed the two PWA orders from Mrs X's account, but only have an e-mail address for the customer who paid by Paypal, so have only been able to confirm their order, although I have all the other relevant details of the second customers order. Of course I am worried that had the two customers clicked on 'My Account' they would have seen Mrs X's details. After visting Mrs X's account I clicked on logout and have since been unable to gain access in the way I have described above. Unfortunately, we can't guarantee that every customer will logout. Therefore, I'm afraid I will have to spend the rest of the day removing PWA from my websites unless anyone can propose a quick solution. I would be very interested to hear if anyone shed any light on this.
  7. No it is not safe to assume anything, my tests showed that a user can not only see the name, address but change the details, certainly with PWA turned on. When I tested this with PWA turned off in the admin, I believe the results were exactly the same but I want to recheck this just to be sure. Certainly, users saw each other's cart contents in this case also (i.e. with PWA switched off in the admin). I can't check re access to users details now with PWA off as I'm on my way out, but will return with the results later today.
  8. Yes, it happens when pwa is disabled in the admin. Thanks for checking this, I will wait to see what your results are.
  9. Just a quick update. I've checked another site that I have, which is completely separate, which also has pwa installed. Again simultaneous users can see each other's information. Both sites were generated completely separately and have different contributions installed and I have not copied anything from one site to the other. The contributions were loaded from the instructions both times. Another site which is oscommerce, without pwa, does not experience any such problems. Can I conclude that this is something to do with pwa?
  10. I was thinking along the same lines. It'll take me a while to get a previous version of the site without pwa going again, then I'll do some testing. I'll report back with the results. In the meantime, if anyone else is able to test their site with simultaneous users it would be interesting to hear if anyone experiences problems with users being able to see each other's info.
  11. I tried this with pwa enabled and disabled in the admin. Both had the same results. I haven't tried this on the site where pwa isn't installed at all.
  12. I had two friends in completely different locations(countries) to myself login to my website. We were able to view cart contents/account information belonging to each other when on the site at the same time. It seems to happen intermittently rather than all the time and while one of us might see anothers account details, another might not see anything other than their own order. I'm not a php wizz so I have no explanations, I hope someone is able to help resolve this.
  13. Well I'm sorry to hear that this is a general problem and not just something I have 'broken' as was my first concern. I'm not sure how this can be a problem relating to cookies though, when information is being shared between users on different computers around the globe? What makes you think it's cookie related?
  14. I don't know if anyone is having similar problems - I hope not. I've recently installed the latest pwa version. When I and two or three others are logged into my website simultaneously, we can see each other's orders in the shopping cart. Not only that but if one of us is logged in, its possible for someone else to access the account details by clicking on My Account. Can anyone suggest a reason for this, or where I need to start looking to resolve this? I would really appreciate some help with this as I'm obviously worried about the security issues. Many thanks in advance
  15. Well, sorted. In fact the problem was due to adding a form function, it stopped the form from uploading the file, nothing to do with the contribution, just my own inaccuracies. Thanks a lot
×