Magento cachen in header: welcome and cart when session expired - session

It seems my Magento is showing wrong information in my header. When the session expires, it still shows information for a specific user. When I return to the website after a day, I did still see "welcome rolandow!", but then when I click this to access "my account", it asks for my login details.
The welcome message I solved by checking in the Header block with IsLoggedIn() if the user is still logged in. But now it also shows my shopping cart while I am logged out.
It shows the actual shopping cart of the user account that I last used to log in. If I open another browser, alter my shopping cart, and then refresh the browser with expired session, the cart is renewed, so the data must be pulled out of the DB. When I click my account, or want to finish the checkout, it asks for login.
So this must be a cookie / cache problem.
I am using APC cache on the server. I don't have caching plugin's installed. Version is 1.6.2.0.
Any idea's?

Ok, sorry, this was probably just the setting "Persistent Shopping Cart" which can be found under System -> Configuration -> (Customers) Persistent Shopping Cart.

Related

Magento PayPal Checkout Flow - user has to login twice?

we are working on optimisation for our Magento site. Here is the flow we found and not sure whether it could be improved.
When user clicks the PayPal checkout button, it is moved to Paypal login page. After login page, it shows the checkout page where user has to input password again. Is it normal? Can we skip the previous login page since user login twice during the checkout flow?
Are you using express checkout? Have you tried to change "Skip Order Review Step" to yes?

Forms authentication - keeping user logged in after redirect to Paypal

I have a shopping cart in my Umbraco site - when the user clicks pay they are redirected to Paypal to pay for the contents of the cart. Once complete, Paypal redirects back to my site courtesy of a return url I specify in m post data.
The return url is a page that contains a list of purchased subscriptions for that user and they need to be logged in to view it. Since they have to be logged in to click the button that takes them to Paypal I would have expected them to be still logged in when Paypal redirects back to my site but they never are.
I've tried increasing the timeout in the web.config forms element but this has no effect. It's weird, I can shut the browser down & reaccess my site and still be logged in - it's just this post back from Paypal that seems to screw it up. Anyone have any ideas?
After a little more digging as suggested by pc-pdx the problem was that my auth cookie was getting generated for www.mydomain.org.uk but the Paypaf return url was specified as http://mydomain.org.uk.
I changed the return url to http://www.mydomain.org.uk & it fixed it.

Magento1.7:Facing issue with shopping cart

I am facing some critical issue in Magento:
When I logged in and added some products in cart and logged out, again logged in then those products were still remaining in shopping cart.
----> This should not have happened because I set "Clear Persistence on Log Out".
The steps involved in this case are:
I logged in.
Added 2 products to my cart.
Now I logged out.
Then without logging in , I browsed the website and added 4 products to cart.
After that, at the time of checking out I was requested to login, so I logged in.
Now instead of 4 products(which is intended), I see 2+4=6 products in my cart during payment.
I configure as below --
Enable Persistence -- Yes
Persistence Lifetime (seconds) -- 60
Enable "Remember Me" -- Yes
"Remember Me" Default Value --- No
Clear Persistence on Log Out -- Yes
Persist Shopping Cart -- Yes
But unable to figure out the problem, in configuration I put 60 second. I logged out and after 5 minutes again I logged in. I found products are remain in shopping cart.
According to configuration, product must be deleted from shopping cart after I logged out.
I messed up with this problem.
Kindly help me.
It's the persistent cart feature introduced in Magento 1.5. You can disable it at:
System->configuration->Persistent Shopping Cart

My Magento wishlist doesn’t work

I am running the Magento version 1.5.0.1 and I have a problem with the wishlist.
If the visitor clicks Add to wishlist without being logged in, the website redirects them to the login or register page, that's OK. The problem is that once the user create the account or log in, the wishlist is empty or that product never where added to the wishlist.
If the user is logged in and clicks "Add to wishlist" it works perfectly.
I appreciate any comment.

Magento cart stored client side or server side?

If a visitor adds items to their cart on a Magento site, could they follow a URL (maybe containing a session id?) from another machine an see the contents of their cart? Or is the cart stored in a cookie on the client side and therefore not available from another machine?
Thank You.
See the new persistent cart feature in 1.6 CE:
Magento stores a long-term cookie in each browser (per device) once the customer logs in or creates an account using that browser. The long term cookie allows us to re-create some of the session the user had when they were logged in previously. For example, a users shopping cart is re-created upon subsequent visits to the site. It does not allow the customer or another user to access sensitive information. The user will not be able to complete the checkout process or access account information unless they are officially logged in. Persistent shopping cart is completely configurable by merchants, provides an additional way for the merchant to strengthen customer satisfaction and loyalty and helps increase conversion rates.

Resources