Kryptronic Software Support Forum

Search is your friend.  Much faster than waiting for a reply so someone else can do the search for you and point you to multiple existing threads on the topic.  Just sayin'...

stevez wrote:

I would have done a search Rachael, but I can't see a search box anywhere...?

Right at the top of the page is line that reads

    * Index
    * User list
    * Search
    * Profile
    * Administration
    * Messages
    * Logout

stevez wrote:

CCP support have removed the links but they're saying that "The main problem with your website is that is uses a mixture of fixed htm pages and ccp6 pages. They should all be generated by ccp6 for the best results.

I have no idea who "CCP support" may be but the links I posted are both valid and detail what the problem is and it has nothing at all to do with fixed pages.  The problem is static links with a sid value as detailed in the threads I posted the links to.

stevez wrote:

The thing is, the site has running without any issues for 4 months now. No problems at all, and it's always had static pages that must be there for an seo campaign we're running.

Quite likely you updated something and added a static link with a sid value.

stevez wrote:

So why did the error occur in the first place?

See above and the links I referred you to in post number 2 above.

stevez wrote:

A bug with CCP possibly?

It is not a bug or problem with CCP.

stevez wrote:

What can I do, without removing static pages, to stop it happening again?

Find and correct the static link you likely added that has a sid value.

stevez wrote:

You said the problem "has nothing at all to do with fixed pages". Howard at CCP support appears to say the opposite - he said we shouldn't use them.

Don't want to argue with Howard but that is, to be kind, bunk.

stevez wrote:

He said "The main problem with your website is that is uses a mixture of fixed htm pages and ccp6 pages. They should all be generated by ccp6 for the best results." and in a later message "the current static pages need to be moved to the clickcartpro webpages, so that it will provide the correct link to your account automatically, as this is different depending on if the customer is login or not." (I think he means "logged in").

The only caution when creating/using static pages is that you must be careful not to include a sid in any URLs.  Including a sid is what creates the situation you ran into nothing more and nothing less.  It is NOT a CCP bug or problem as carrying a sid in the URL is normal and expected on initial entry to a site.

stevez wrote:

I have no idea how the sid coding could possibly have been added to the links on the static pages. It's quite impossible that they were added by me in Dreamweaver, so they must have been generated by the CCP software, surely?

As I said just above, yes, CCP will include a sid on links on initial entry to a site or if cookies are disabled.  That's why you have to "clean" off CCP generated URLs to make sure that they don't include a sid value.

stevez wrote:

My biggest concern is that this will happen again. My client has already lost a day of sales because of this and if it happens again they will bill us for the average loss over a day. Which is very worrying...!

You now know what the problem is and how to mitigate it so you shouldn't have any further problems as long as you carefully check any URLs you copy from CCP generated pages.

Dave - this has just happened again. There's definitely some sort of bug with the software - we've not touched the site sice Howard fixed it.

This is seriously worrying.

Steve

Dave,

Howard in support has just said the following, again:

"The best solution would be to move the static pages to within ClickCartPro, if you do not want to do that then you will have to remove the ‘Your Account link from the static pages."

You say that this is not necessary at all.

One of you is wrong, surely?


Steve

We're running an SEO campaign for that client which is working very well. We must have static pages for it to work.

What you're saying is that " ‘Your Account’ changes within ClickCartPro depending on if the customer is login or not. "

So, when a customer is logged in to buy something, anyone else going to the site will see their account details on the login page and account setup page, is that correct?

See https://www.uniform4kids.com/shop.php?a … ateaccount

Everyone going to create an account is seeing that person's details. That's clearly wrong, isn't it?

If you click on "your account" you'll see that person't login username in the login field.

That's not correct either, surely?

There is something definitely amiss with your software. No-one is making an order and my client is getting calls from customers saying they're seeing that person't personal details on the site. This is not right, so why are you saying it is?

Steve

Dave - my developer cleared the sid values in between my last message and this, hence you've not seen the issue from that link I gave.

My big concern is that in 4 months that the site has been running with your software there was no problem at all. Static pages, everything, was just fine. In the last 2 days it appears the software has been writing the sid coding into the pages and that's why everyone is seeing another person's account details when accessing the site. This has now happened twice in two days.

You're saying there is definitely no bug with the software. I hop you understand why I think there is - otherwise how can this possibly be happening? Everyone has been seeing this other person's account details - so it's nothing to do with a cookie or something stored on our local machines. As a result of all this, nobody has bought anything.

I can see we're going round in circles here. I will have to decide if we'll need to buy different software if this continues. I trust you understand my real concern about what is happening.

Steve

Well, we've removed them for now Dave, and we've also removed the account login etc buttons from the static pages. Hopefully this won't occur again.

Thanks for your quick responses on this issue.

This was mentioned in passing further up the thread, but it is worth bringing to the fore, imho.  If a site visitor copies the URL from the first page they see, which has the SID in it as mentioned previously, and passes that link around... through an email, posting to a forum, etc... then the user information associated with that SID can be presented to other users that follow that link.  If you have not changed anything on your site during the period the problem first occurred, then that could be another possible explanation... since as was correctly pointed out several times, there is most definitely NOT a bug in the software related to this issue.

Both of the links that Google has with the sid= values would not affect anything since they both go to account pages which aren't seen/indexed by their bot anyway.  Leaving them there exposes you to having this possibly happening again.