Cookie settings

[slubbock]

Hello,

Im using XTcommerce v3. I had an issue where cookies weren't set correctly and customers were able to view the admin area through my account. I enabled more cookie options but this how now stopped anyone from being able to log in. Is there a way I can revert the cookies back without having to log in as I'm unable to?

Regards,

Steve.

[slubbock]

After editing the database information for how cookies are handled within the store I was able to restore some functionality. The issue now is whenever browsing the shop on occasions the user will be taken back to the account registration page for no reason?

[slubbock]

My main issues are if:

A. You disable all session attributes and reduce security on your store, the shop works but customer details will be mixed between browsers i.e customer A can see customer Bs details and vice versa. If this is being tested internally is this purely because user A and B are sharing the same IP?

B. You enable security attributes within the sessions area but the shop becomes unuseable, i.e sessions + cookies are not being stored correctly and user details are forgotten, forcing the user to log in over and over.