Question: Staff mixed with login

Staff mixed with login

Hello support I have stranger issue , few days ago, I have problem with server sometimes up and down,this cause staff account mixed, when staff A login see welcome staff C and able to manag

GM

Godfrey Mrina

Asked
Hello support I have stranger issue , few days ago, I have problem with server sometimes up and down,this cause staff account mixed, when staff A login see welcome staff C and able to manage sales, product etc. of staff C but after shifting to another servers , still staff login mixed each other, and warehouses, sometimes user A login see welcome user C and see the items of warehouse of user C may I know what is problem please? This cause stranger issue in business . Please help as emergency.
  • MS

    Mian Saleem

    Answered
    Hello,

    That's something unbelievable :( but as it happening to you, I would suggest

    1. Checking user accounts again, edit and change password from owner account would be good
    2. If users are assign to custom groups, should check their permissions again
    3. Making sure that there is no issue with database's sma_users table, specially duplications.
  • MS

    Mian Saleem

    Answered
    The sessions are saved in database, you can clear/empty the sma_sessions table and lastly try to change the cookie relates settings in the `app/config/config.php` around line 381 - 385 as below

    ```
    $config['cookie_prefix'] = 'god_';
    $config['cookie_domain'] = '';
    $config['cookie_path'] = '/';
    $config['cookie_secure'] = TRUE;
    $config['cookie_httponly'] = TRUE;
    ```
  • GM

    Godfrey Mrina

    Answered
    Thank you for fast reply I waiting email notification for longtime .
    app/config/confing.php in line 381-385 , is that correct what I do or need to change 'SMA' to 'god' ?

    $config['cookie_prefix'] = 'sma_';
    $config['cookie_domain'] = '';
    $config['cookie_path'] = '/';
    $config['cookie_secure'] = TRUE;
    $config['cookie_httponly'] = TRUE;
  • MS

    Mian Saleem

    Answered
    There are 5 check list/suggestions. Yes, you can change cookie prefix to text and set the secure and httponly to true :)
  • GM

    Godfrey Mrina

    Answered
    *Thank you , other check list like changes their password we already did, create other account and suspend the old one user duplicates, check permission again. Maybe let try the last one (No .3 ) Also I check the session table contain 70% database let say database has 150MB it takes 116MB maybe is the problem ?

    *And now system is working what if I delete session table and re-create again , is their any impact for login users ?
  • MS

    Mian Saleem

    Answered
    You mean the sessions table is not being purged. I will check this.

    I don't think it should have any impact except size but you can try monitoring the situation.
  • GM

    Godfrey Mrina

    Answered
    Yes session table increase size every time,
    Can you answer this please ? *And now system is working what if I delete session table and re-create again , is their any impact for login users ?
  • MS

    Mian Saleem

    Answered
    Yes, the current users will be logged out and they will need to login again.
  • GM

    Godfrey Mrina

    Answered
    Also this system I'm not updated for some while is 3.4.8 , I want to updates manually to current one , my I know which database version can start file/db_updates ?
  • MS

    Mian Saleem

    Answered
    You will need to import all the file named 3.4.9+ (some versions has db changes and other don't). So you can import all the upper version files.
  • Login to Reply