In a CGI::Application ecomm app I'm using CGI::Application::Plugin::Session. When adding an item to the cart:

• a instance script calls Cart.pm
• session is started
• a cookie is written
• an order_id created and assigned to the session

Code that creates session:

$self->session_config(
    COOKIE_PARAMS  => {
        -name    => 'ECOMM_SESSID',
        -expires => '+4h',
        -domain  => '.mysite.com',
    },
    SEND_COOKIE => 1
);
CGI::Session->name('ECOMM_SESSID');
[download]

A variable dump when viewing the cart shows:

session_id = 123456789
$self->session->param('order_id') = 4321
[download]

And the browser Inspector shows:

cookie: ECOMM_SESSID
[download]

All good.

The problem comes when calling the next instance script for checking out. In sub cgiapp_prerun, the existence of the order_id is checked. A variable dump when viewing here shows:

session_id = 987654321 <= a different id than above
$self->session->param('order_id') = null <= no value
[download]

And the browser Inspector shows:

cookie: CGISESSID <== ECOMM_SESSID is missing and instead...
[download]

Each time the new instance script is fired, a new session is created. Interestingly, if I return to the cart, all the original values remain.

Bottom line: when firing a new instance script, a new session is started and the cookie is not being written. So, what am I not getting?

(Note: this is similar to Re: Re: Re: Stay aware of security but the proposed solution didn't work