[SOLVED] Cookie being dropped when outside of Prestashop Directory

[brad-w]

Hey everyone, I have Prestashop running in my /products directory and it seems that every time I navigate too (for example) my contact us or privacy policy page (outside of the /products directory) all items in the shopping cart are dropped regardless of being logged in or not. Is this just a cookie setting that I'm not aware of?

EDIT: The logged in status also drops when outside of the directory.

Thanks,

Brad

[razaro]

Try this
http://php.dtbaker.com.au/post/prestashop/cookie_cart_not_saving_on_whole_site

[brad-w]

Thanks for the quick reply, I tried David Baker's suggestion but it seems the only effect was that when the login form is filled in correctly the cookie is not set at all. The entire login fails and reloads the login page.

[brad-w]

This is really strange.. I just removed the line of code that the website suggested, re-uploaded the Cookie.php file exactly as it was before and it seems to work now? I'm going to keep playing with it and see if I can figure out what's going on...

EDIT: It seems to have gone full circle and is now acting the same way as when I posted the original problem. If anyone else has a solution for how to edit the cookie I'd really appreciate it.

[mohsart]

Could it be some sort of cache issue, so that the fix in fact worked, only didn't show until after a while?

/Mats

[brad-w]

For awhile there it was acting really weird but I cleared the cache, closed all my browsers, uploaded the file using the suggestion above and it's working great now. Thank you for the advice guys.

[Burhan BVK]

Can you login to the admin backend after this change?

[brad-w]

I can yeah, everything has been functioning correctly over the last few days here.

[Burhan BVK]

I have tested this, this could cause a security problem. This change could possibly lead a logged customer to access your backend, or a logged in employee to access a customer account. Did you try logging out of the back end, and logging in as a customer in the front end, then browsing the back end might give you access without logging in as an employee.
I think any customer could potentially access your backend now.

[crushman]

the site he went on doesnt exist anymore, but i need that same thing. i have some pages outside the prestashop dir that i need customers to still be logged in when they access them. how is that done??