Posting in the Magento forums has been disabled pending the implementation of a new and improved forum solution which should better serve the community.

For new questions please post at magento.stackexchange.com, the community-run support site for the Magento community. We will be providing updates on the new forum solution soon. For questions or concerns please email community@magento.com.

Magento Forum

Possible Cookie Leak in 1.1.8
 
turbo1
Sr. Member
 
Avatar
Total Posts:  296
Joined:  2008-08-19
Los Angeles, CA
 

I would like to know if anyone else is having a similar issue, because this is a serious security concern.  When I visit my magento store (after having cleared all temp files, cookies, etc), I can see things in the “Recently Viewed” box.  And I’m seeing things that I haven’t looked at.

I tested this with some anonymous proxies on different computers, going to my site, and voila - there are things in “recently viewed”.

My cookie settings are as follows:

Cookie path: /
Cookie domain:
Lifetime: 3600

Anyone else seeing other people’s items?

 
Magento Community Magento Community
Magento Community
Magento Community
 
turbo1
Sr. Member
 
Avatar
Total Posts:  296
Joined:  2008-08-19
Los Angeles, CA
 

Thanks for your reply, I will follow your advice smile

 
Magento Community Magento Community
Magento Community
Magento Community
Magento Community
Magento Community
Back to top