replace global $cart scope with $_SESSION