How is this even possible?!

Tim Perrett wrote:

I have the scenario where by i have an anonymous checkout on a shop, but
somtimes i tihnk if there are concurrent users (lets say users A and
B), user A gets there results they would expect on the review page, but
user B gets user A's details?!?!

How can this even be happening as in the controller code im using the
session[:order_id] to identify shopping baskets and the like. I have
just moved to AR sessions from PStore, is there some issue with AR
sessions comparitivly to PStore?

Can you post the code that creates the Basket object in the first place
and assigns its ID to the session variable? Maybe there's something in