Checkout issue still there! Is it a lost session issue?

[mhcwebdesign]

Hi Daniel,

See my new comment and added screenshots at #335 !

[mhcwebdesign]

OKI, I ran some further tests. The issue seems to be caused by the line:

        // Regenerate the session ID on each request so it can not be hijacked.
        session_regenerate_id();

in system/library/session.php. When I comment it out, the checkout works fine, no lost $this->data->session['payment_methods'] during the checkout. As soon as I allow session_regenerate_id() call in system/library/session.php, the checkout issue re-occurs!

Maybe session_regenerate_id() calls don't play nicely with all the Ajax calls during the checkout procedure?

[opencart]

i'm not sure it can be hijacked because this is how oscommerce and other systems have used sessions for years.

and those guys put the sessions in urls