Your session has timed out.

[alexboyer]

Re: Your session has timed out.

Ok, so here's a curveball for the experts... It just started working again... I was still searching for the solution and it just started working after what seemed like a restart of the database service.................. That sentence deserves more dots than I care to type. Hmm.... Still scratching my head.

[alexboyer]

Re: Your session has timed out.

So... Is anyone able to divulge whether the new session management can be turned off by the host and revert to the older method? I'm not sure what just happened but that'd be my first guess.

I wonder if this client's host downgraded the store... Still searching.

[alexboyer]

Re: Your session has timed out.

This is a Hostasaurus account so if you're watching this David, I'm curious to know if my guess is correct. :D

[Kent Multer]

Re: Your session has timed out.

Regarding Alex's curve ball -- I'm not sure if this is relevant, but I'll mention it. One of my clients' stores is having a problem with admin logins not working. If I leave the store alone for a while, it starts working again. I suspect, though I haven't checked, that this is related to a session timeout. The client just upgraded to PR7 recently.

[Rick Wilson]

Re: Your session has timed out.

No, the old method is not pci compliant.

[alexboyer]

Re: Your session has timed out.

No, a previous developer reverted the site back to pre-wombat.

[Jim McCormick]

Re: Your session has timed out.

Ok I submitted a ticket. Thanks for the info.

Can you private message me the ticket number? I searched our ticket system for your email address and can only find a few old tickets that are closed.

[Rick Wilson]

Re: Your session has timed out.

Here's a video from our conference outlining the cookie and session management changes in PR7 and why we made them.

http://www.youtube.com/watch?v=EzXA71GPoOA

[MichaelBrock]

Re: Your session has timed out.

Has there been any updates on this issue? I still have a few customers reporting the issue. Module's don't typically get their hands wet in the session management but any suggestions on what the problem might be or how to resolve it would be useful.

[alexboyer]

Re: Your session has timed out.

Sorry Michael... The only site I had available to test solutions against was reverted to a pre-wombat state.

I'd love to help out but I'm going back to school quite soon. The only reason I was helping out that client is because I built the initial integration. Now that it's working again for them, I can't really help.

From what I noticed, there is an additional variable that gets generated near the end of the checkout process. I believe cURL will need to be employed in some fashion to capture it, set it to the user's local computer and communicate it back to the Miva engine. This is a very preliminary assumption however as I didn't have enough time to sort out whether that was the case. I hope this small bit of info helps someone else carry it the rest of the way.

[Rick Wilson]

Re: Your session has timed out.

Since Alex rolled the site he worked on back, I'm not sure if this is the root of the problem he was having, but we finally found a site today where we could reproduce the issue and get in and take a look.

Here's what we found:

1. They were using a third party payment gateway, we'd never heard of, eProcessor Network or something like that and it's not clear who wrote the module.

2. The module doesn't follow the API's and get the Session variables properly (if it did, it wouldn't have broken) and is likely just looking the old Session ID's up in the database without following the proper procedure

3. Until the developer of this module comes forward and updates it, or the customer switches to a different gateway, there's nothing we can do to fix it for them.

We've added this module check to the Upgrade Advisor so anyone else using this module who tries to upgrade will be prevented until they stop using this module, or the developer releases an update to fix the issue.

[rwatson]

Re: Your session has timed out.

Has there been any updates on this issue? I still have a few customers reporting the issue. Module's don't typically get their hands wet in the session management but any suggestions on what the problem might be or how to resolve it would be useful.

MichaelBrock, Have you found a solution to this yet? We've been having the same issue, but only with Internet Explorer (not with Firefox, Chrome or Safari). We even added a message warning our customers of the problem.

FYI, if, while using IE, I go into Tools -> Internet Options -> Privacy Tab -> Advanced button and select "Override automatic cookie handling" and set both of them to "prompt", I can get the site to work (or at least I can get to the OPAY screen). We still have an open ticket with Miva and I'll post here whatever the final outcome is.

[lesliekirk]

Re: Your session has timed out.

Seems I have stumbled upon this issue in a dev site that I am trying to test some checkout changes on. I can make it to the Shipping/Payment Select screen and then it throws me back to an empty Customer Information screen. The basket contents are still intact.

The dev site isn't using any https setting - could that be the issue?


Production Release 7 Update 10
Miva Merchant Engine v5.12

Thanks,
Leslie

[Brandon MUS]

Re: Your session has timed out.

Great, and here I felt confident about the changes I made to be "wombat ready". I haven't ever seen this issue, but now I'm concerned that I haven't tested thoroughly. Can anyone post re-producable steps so I can see if I share the issue? Also, does it only affect sites with a shared SSL?

[lesliekirk]

Re: Your session has timed out.

1. They were using a third party payment gateway, we'd never heard of, eProcessor Network or something like that and it's not clear who wrote the module.

The dev store in question is:

Production Release 7 Update 10
Miva Merchant Engine v5.12
Database API: mysql

using the following payment modules:

Google Checkout
Credit Card Payment with Simple Validation
PayPal Website Payments Standard
Payment Designer
Purchase Order Plus
VC Simple Payment

Since it's a dev store, I'm going to deactivate everything except Simple Validation to see if it will work. Oddly enough, the live store seems to be working fine, but I really need to be testing on the dev site.

Any suggestions for getting this to work on the dev site are welcome.

Leslie