You shouldn't comment out session_regenerate_id because you'll risk session fixation attack against your site.

The problem easily can be circumvented by using your own session variable to store the cart id. The permanent session id is not something you can rely on and you shouldn't have.