Your session has timed out.

[alexboyer]

Hey everyone. Got an older store that went through the upgrade (I didn't know they would) and now I'm getting a session timeout message between the OUSL and OPAY screens... Any ideas why something like this would happen? Even if there are a number of reasons why, I'd like to know please.

Thanks!

[alexboyer]

Re: Your session has timed out.

Seems it may have something to do with the mm5-EI-checkout-session cookie. This is new to me. If this could be causing it, what's it for? How is it handled? How is it generated?

Thanks again.

[Rick Wilson]

Re: Your session has timed out.

Alexboyer,

We had to rewrite our session management from the ground up to be PA-DSS (and ultimately PCI-DSS) Compliant. That's where/why these new cookies exist.

I would suggest opening a support ticket with us on this one, you can email support@mivamerchant.com or call us 858-490-2570 M - F, 7 AM - 7 PM Pacific time.

[alexboyer]

Re: Your session has timed out.

Thanks Rick, I'd actually prefer to keep the discussion here as it involves integration with other systems and this info may help other developers. While I don't expect help with my specific integration, I would like to know more about the management, the variables involved and what Miva is expecting to see as far as header and session info.

Thanks again.

[Rick Wilson]

Re: Your session has timed out.

Alex,

What we expect are the default settings. We wont be able to assist further without giving support access, you're free to post the final result for posterity if you'd like but we can't use this as a medium for public tech support on this issue.

[MichaelBrock]

Re: Your session has timed out.

Yes, please do post the results here. We have a few customers reporting the exact same issue. Although they have attributed it to the Phone Order Manager I suspect the cause is something broader.

[Kent Multer]

Re: Your session has timed out.

Yes, please keep the public info coming. If cookies and session management have been changed, developers need to know about it.

Thanks --

[alexboyer]

Re: Your session has timed out.

Well if anyone not associated with the company has any ideas, or if someone from there can unlock something from the secret box :P we'd greatly appreciate it... Since I don't have access to paid support, I'll have to see what I can do to figure it out.

[lesliekirk]

Re: Your session has timed out.

I'm not associated with the "company" neither are Kent or Michael, but opening a support ticket with Miva Merchant is going to be the best way to go. They are the folks that wrote this stuff, so they would be the best ones to figure out what broke it. But they can't tell you what is wrong or fix it, if you won't say "ahhhh".

[alexboyer]

Re: Your session has timed out.

I'm not associated with the "company" neither are Kent or Michael, but opening a support ticket with Miva Merchant is going to be the best way to go. They are the folks that wrote this stuff, so they would be the best ones to figure out what broke it. But they can't tell you what is wrong or fix it, if you won't say "ahhhh".

(b ^_^)b

[d_host]

Re: Your session has timed out.

This may or may not be related, but some of our clients have been reporting weird issues after the upgrade to Wombat/PR7, and all appear to be related to the new session handling. Sometimes this exhibits itself when you add items to cart from product or category pages but you get the "your basket is empty" message when you try to check out, or you get the "your session has timed out" message.

As best as we've been able to determine, this can happen when the session switches from secure to non-secure mode, or more accurately - when the category and/or product pages are in secure mode. You'd think that adding something to cart in secure mode, then clicking on (secure) checkout link wouldn't be an issue, but it appears it is. You have to force the category and product pages to be in non-secure mode, and then this fixes the issue. So it seems to me like you cannot have your store stuck in secure mode if you want the basket functionality to work with the new way of handling sessions in PR7 - you must kick the visitor back to non-secure mode.

This may not be a huge issue and it's easy enough to "fix" - though one wouldn't expect this to be a problem in the first place so it shouldn't need fixing. Heck, some clients NEED the product page to be in secure mode, if they ask for sensitive info related to the product that needs to be sent with the order form. Right now in PR7 it appears this may no longer be a viable option...?

[alexboyer]

Re: Your session has timed out.

There's more than one thing going on here. First off, the Session_ID parameter that used to be populated by the old cookie variable htscallerid has been changed to use a new one called mm5-EI-basket-id.

I also noticed a new variable called mm5-EI-checkout-session which gets generated at some point... Looking at the headers, it seems a new one is getting generated until after a certain screen at which point it stays the same for the rest of the checkout process.

Hmm... Progress already I think.

[alexboyer]

Re: Your session has timed out.

Sometimes this exhibits itself when you add items to cart from product or category pages but you get the "your basket is empty" message when you try to check out, or you get the "your session has timed out" message.

For the empty basket issue, try changing references for htscallerid to mm5-EI-basket-id. The session timeout issue has something to do with mm5-EI-checkout-session. I'll try a few things to see if I can get the system to generate it and continue recognizing it while integrated.

[Rick Wilson]

Re: Your session has timed out.

Since I don't have access to paid support, I'll have to see what I can do to figure it out.

You should call anyway we're fairly liberal with the free support especially around new releasees unless you have a history of abusing it.

[alexboyer]

Re: Your session has timed out.

Ok I submitted a ticket. Thanks for the info.