ending the current session...

laeelin

I've build a shopping card that uses Sessions to track information before placeing that information into the database.

The problem i've ran into is that after they place an order, if they then go back to shopping and decide to add a new item to the shopping cart and then purchase the item it overwrites the last order them made because I use the session ID as the card ID and order ID for the system.

I can fix this by other methods, but i would prefer to start a new session after the order is saved.

session_id() returns the session id for the current session. If id is specified, it will replace the current session id.

This command addears to be the one i should be useing, but how do i make a session id to give to session_id?

Thanks
Laeelin

planetsim

You should have some sort of log. So a table called session or something

get the session id as my the feild ID. Get all the items added to cart in the next feild say items.. making sure they are seperated by ||| or maybe a new feild.

Once they have finished and have paid via credit card or whatever your doing in that respect. You should maybe get that into another table of purchased.. sessionid, name, items, total cost, time etc. As a backup record. Keeping in mind you do not keep credit card details.

echomonkey

but i would prefer to start a new session after the order is saved.

Whynot destroy the current session, unregistering all data, then start your new one:

session_unset();
session_destroy();
session_start();

But this might generate the same session ID as last.

Wanting to spesify your own session id for session_id()? You can use the example given by martian at upm dot edu dot ph/kudarat Here:

http://ca.php.net/manual/en/function.session-id.php

Indeed your own system for generateing session ID's would be nessisary if this is the direction you are going to take. If you called session_id() alone without any arguments the current session ID would be returned.

laeelin

Whynot destroy the current session, unregistering all data, then start your new one:

PHP:--------------------------------------------------------------------------------
session_unset();
session_destroy();
session_start();

But this might generate the same session ID as last.

As soon as i read this I realised a super easy way to do it...
$newsid=$sessionID.'1';
session_unset();
session_destroy();
session_start();
session_id($newsid);

Simple fast and easy =)

edit:

Keeping in mind you do not keep credit card details.

Thats the only way I know enough to make it secure enough to accept a credit card =)

When they enter the CC information it's stored in the database(encrypted), and not saved anywhere in the session =)

Thanks for the help
Laeelin