Hi Ton,

Cart status is stored is a session cookie, if  you close your browser or the session expire the content cart is loosed. This is by desing for security reasons. On the other hand, if the user is logged and go to the checkout page, items are the stored is the database under his account and can be retreived at any time.

Gilles

---

We (team members) are Humans offering their knowledge, their work and their spare time FOR FREE to benefit the community. It would be so particularly appreciated that your messages begin with "Hello" and end with "Thank you" or any other form of politeness. Ask yourself what your reaction would be, if you were approached by me (a total stranger) on the street to ask you something without saying "Hello" nor "Thank you"? After several years of services dedicated to the community, I begin to be tired to read requests without any form of politeness.

Hi Jan,

You have to apply some changes in the source for this behavior. In fact, the cart and items are always stored in the db (tables: Store_Cart and Store_CartItems), only a cookie with the cartid is stored on the client side. Previously, the cookie was created with an expiration of 30 days. The security team ask me to remove this feature when the Store module was submited to the release tracker. The main reason is privacy, imagine a visitor of your online store add items to his cart then leave your web site. Anyone reopening the browser on this computer and going to your web site will be able to see the previously selected items even if he is not the owner (the first visitor) of those items. A quick workaround was to remove the expiry duration of the cookie. By the way, a cookie without duration is a cookie session and expire when the user close the browser. If you reapply an expiry duration, you will expose your users to violation of their privacy. On the other hand, it's possible to retreive the content cart in a safe way but IF AND ONLY IF your user MUST be logged to access your store. In this case, you could add a test in the CurrentCart class method getCartID to retreive the user's cart from the db if the cookie is null. This is simple to do because the StoreCart table contains the UserID, but this value is accurate IF AND ONLY IF the user was logged when the cart was created, otherwise this value is equal to -1.

Gilles

---

We (team members) are Humans offering their knowledge, their work and their spare time FOR FREE to benefit the community. It would be so particularly appreciated that your messages begin with "Hello" and end with "Thank you" or any other form of politeness. Ask yourself what your reaction would be, if you were approached by me (a total stranger) on the street to ask you something without saying "Hello" nor "Thank you"? After several years of services dedicated to the community, I begin to be tired to read requests without any form of politeness.