Quote from: OpenGeek at Nov 20, 2006, 12:57 PM
Quote from: sottwell at Nov 19, 2006, 12:57 PM
Then I’m going to rework the whole thing to use a couple of database tables instead. I’ll only store a key and a tag for preventing re-submissions in the SESSION.
Susan, let’s chat about this before you decide to do that, if you don’t mind. IMO, session data needs to be handled by the registered session handler in the standard way provided by PHP, and trying to maintain what is session-related data in other forms is not really the most efficient approach to solving this problem of shopping cart "state". What is the real motivation for doing this?
I think that the motivation was the intransigence of PHP sessions (24 minutes by default), combined with occasional flakiness and possible security issues on shared servers. But I’m not sure that storing everything in dedicated db tables is the best solution either. Personally I was going to use a cookie for basket contents and either PHP or MODx-native user sessions for checkout info (excepting the credit card info, which I’m not storing in anything except a post variable).
But I actually haven’t made this leap yet, and I’d definitely be interested in alternative ideas before I do. Especially from someone who knows the future path of MODx so intimately. And if we are going to set up a collaborative effort on this then we should all be on the same page, so I don’t want to go off on my own tangent if it’s not what most people think is the best course of action.
Speaking of collaboration, how shall we get that rolling? I’d be happy to set up a test installation (0.95? 0.97?) on a server and give access to folks who are working on this. Susan already has one set up as well, but maybe we should have one stable test site and one for development purposes?