Guest Purchase - Is invalid

Hello,

Your shop pages are served from the LiteSpeed cache. I loaded community.advancn.org/estore twice, from two different sessions, and both times the answer came with the header "x-litespeed-cache: hit", without any session cookie, and with exactly the same security token in the page (csrf.token 870646592487c9cbc27f8e4769348d76). So each guest sends a token which belongs to another visitor's old session and HikaShop refuses it with "Invalid Token". Logged in users don't have the problem because their pages are not taken from the cache.

Please exclude the HikaShop pages from that cache and purge it. If you use the LiteSpeed Cache plugin for Joomla, add com_hikashop and the cart, checkout and shop menu items to its exclusion list. If the cache is activated on the server with the .htaccess file instead, this kind of rule will do it :

RewriteCond %{REQUEST_URI} ^/(estore|cart|checkout)
RewriteRule .* - [E=Cache-Control:no-cache]