Skip to main content
Session management is always required in order to unambiguously associate a shop’s customer with their activities in the shop. This is the only way, for example, to link a shopping cart’s contents to the correct user or the user to the correct customer account.

​
Assignment and allocation of the SessionID

This unambiguous link is realized through a session identifier (SessionID). WEBSALE V8s creates a SessionID in the shop management on the server the first time a buyer accesses the shop. Once a buyer has logged into the shop, the SessionID is changed, in accordance with the TÜV specifications. Correct shop operation is only guaranteed if the SessionID remains associated with every click of the user from that point on. The session is stored in a cookie on the user’s system and is thereby transmitted from the browser to the server on every click of the buyer. Even though strictly necessary cookies are permissible without an explicit consent request, please coordinate with your data protection officer regarding the use of cookies. Secure cookies are a type of cookie that are transmitted over encrypted HTTP connections. When the cookie is set, the Secure attribute instructs the browser to return its data to the shop application only over an encrypted connection. In this way, the shop content that is relevant for data protection is secured in SSL mode. After login, the buyer’s data is protected against attacks and errors caused by copied SessionIDs in all areas of the shop in which personal and payment data are entered or other sensitive content is present.
A consequence of setting a shop to secure cookies is that ordering is only possible if cookies are enabled on the buyer’s side.
How to detect the browser’s cookie support and how to add a hint for buyers without cookies is described in the guide Cookies. Materials: Cookies used