RE: sessions section of admin

This message was sent from: Development
http://forums.oscommerce.com/viewtopic.php?p=219004#219004
----------------------------------------------------------------

I have been searching and posting to other threads asking similar questions for over a month about this question.  Finally I read this thread [url]http://forums.oscommerce.com/viewtopic.php?t=38976&highlight=%2Arecreate%2A+%2Asession%2A[/url] where Harold points to wiki topic covering thses issues in fairly good (but slightly technical) detail: [url]http://wiki.oscommerce.com/proposalSecurityAndPrivacy[/url].

Once again I would like to point out that the structure and organization of the project could be better.  I wasted many hours reading posts and searching for info on this.  I have been to wiki before but the info there is limited.  Sessions settings are discussed briefly at [url]http://wiki.oscommerce.com/helpAdminConfig[/url] including how to set for AOL users.  The link for Security and Privacy is under a Section intitled Proposals, which I either missed and zipped by cause it did not seem a likely place for present questions/solutions but more likely future stuff as the name implies.

The wiki Knowledge Base (FAQ) is non-existent... if it did exist my guess is that more than half of these posts here on this forum would be prevented since there would be a central place for questions/answers, and ultimately we would save some bandwidth and maybe a tree and our planet (lol), IMHO.

The bottom line AISI:

If you want AOL users to buy from you:
Session Directory /tmp   
Force Cookie Use False  (or True)
Check SSL Session ID False   
Check User Agent False   
Check IP Address False   
Prevent Spider Sessions True   (or False)
Recreate Session False
***All must be set to False except the two noted above***

If you have a shared SSl, then same as above.

If you have your own SSL and your http and https are the same then you can change settings, but then you lose AOL users.