Error in Catalog order

[procheck]

I saw this error in June for Version 8 but it didn't seem as serious as what I've experienced today.

-------------

I've just had the same error and it sent all of the credit card information over unsecured email which I find scary.

Following error has been displayed to a customer: An error occurred while releasing the order number counter lock file. No such file or directory.

The email contained:

Invoice To: (with all the info)

Deliver To: (with all the info)

Calling Host: (with IP number)

Calling Address: (with IP number)
Debugging information: Input Hash: ACTION : "Next>"

All of the billing info followed here...

And I DID receive 2 orders from this customer for the same item which suggests that she double-clicked. And there's nothing wrong with the orders themselves.

This should never have happened. I've done a refresh but the problem still exists in both versions.

[pinbrook]

Actinic Order confirmations "out of the box" do not include credit cards.

do you know what triggered the email as it does not look like standard actinic behaviour to me.

[procheck]

Hi,

Not sure what you mean by "out of the box". Do you mean code that was not customized? Other than a few minor things like stock count, mine isn't.

The only thing that I can think of that might have caused a problem with Actinic was problems with my cgi-bin. I signed onto my website analyzer (http://www.softngine.com/) which is written in php and it had lots of errors. This also happened last week but 2 hours later it was ok, so I didn't think much of it.
However, this time I did go to my site and into one of the products to the first screen to test Actinic. It seemed ok so I didn't go any farther. I thought it was a php problem. Even so I wouldn't have even expected such a thing to happen. I pasted as much of the whole email as possible with details removed.

Following error has been displayed to a customer: An error occurred while releasing the order number counter lock file. No such file or directory

Invoice To:
Name/Cardholder: customer name
Address Line 1: address was entered
Address Line 2:
City/Town: kingston
County/State/Province: Ontario
Post Code/Zip Code: postal code
Country: Canada
Phone Number: 613-999-99999
Email Address: cutomername@sympatico.ca

Deliver To:
Name: customer name
Address Line 1: address
Address Line 2:
City/Town: kingston
County/State/Province: Ontario
Post Code/Zip Code: postal code
Country: Canada
Phone Number: 613-999-99999
Email Address: cutomername@sympatico.ca

Calling Host: 69.999.99.99

Calling Address: 69.999.99.99
Debugging information: Input Hash: ACTION : "Next>"
GENERALHOWFOUND : "surfing"
GENERALUSERDEFINED : ""
GENERALWHYBUY : "grandson is facinated with zamboni"
PAYMENTCARDNUMBER : "the visa # was here"
PAYMENTCARDTYPE : "Visa"
PAYMENTEXPMONTH : "#"
PAYMENTEXPYEAR : "#"
PAYMENTMETHOD : "10005"
RANDOM : "there was a # here"
REFPAGE : "http://www.prochecksports.com/acatalog/sens_zamboni03.html"
SEQUENCE : "2"

[Duncan Rounding]

Has your site been hacked?

I would manually wipe the site and then reupload everything from scratch in Actinic.

If this still persists after that then I would remove the analyzer software and also raise a support ticket with Actinic as this have never been mentioned before. You might also change your passwords and contact your host.

I'm also very confused when browsing your site - it seems a blend of Actinic and manual coded pages. I placed a test order without issue.

[procheck]

Your order was received and it is ok.

I don't think the site has been hacked because I wouldn't have received that sort of email. Those headings are found in the pl & html files. Plus I received 2 orders from that person which we shipped yesterday. The analyzer software is in a different folder (& a different language) and has been running in the same cgi-bin as Actinic for years so I don't see that as an issue.

For arguments sake, if it was hacked this is on the non-secure part of Actinic and the credit card numbers are only captured on the secure(httpS) side. The analyzer software is only on the non-secure side so unless I'm missing something I don't see the connection. I also read of a similar error in Version 8 but I don't know if it involved card numbers. I'll be contacting my ISP to see what kind of problems they had that day.

We bought Actinic for the catalog & not for the front end which we prefer to control. I'm not sure why you find the site confusing to browse because our customers have said that it is one of the easier sites to find what they want quickly. All we're doing is calling the catalog page directly.

Thanks

[Duncan Rounding]

Is this problem still happening or does it seem like a one off then?

[procheck]

Hi,

It only happened that one time but it still concerns me as to why.