Customer order history displaying someone else's order and account info opencart 2.3.0.2

luisvillacrez wrote: ↑

Thu Jul 16, 2020 10:59 am

Hello Everyone,

We have a customer that is seeing other customer order history displaying their orders and account information. We are using opencart 2.3.0.2

We are experiencing the same issue that this other person was experiencing here:

viewtopic.php?t=215112

I already notified our server:

They said the following:

The server doesn't handle sessions in any special way so I'm not sure what to check for that exactly but will take a look.

then they said the following:

I'm really not sure how this would be a server side issue at all, php sessions are php sessions, there isn't much we can do and I don't know what they mean by shared.

If anything, I would take a look at the applications caching:

system/library/cache/mem.php
system/library/export_order/PHPExcel/CachedObjectStorage/Memcache.php
system/library/export_order/PHPExcel/CachedObjectStorageFactory.php
system/library/PHPExcel/CachedObjectStorage/Memcache.php
system/library/PHPExcel/CachedObjectStorageFactory.php

Looks like they might possibly be storing data in cache which could be getting seen by other users.
---------

Has anybody seen something similar like this happening? if so how did they solve it? I have seeing other opencart users experiencing this on the forums but nobody seems to have an answer for it?

Do you know a solution? Please let me know.

Thanks in advanced