Author Topic: Order details and invoice are public and searcheable in Google  (Read 255 times)

acuabit

  • Beginner
  • *
  • Posts: 1
  • A beginner
Order details and invoice are public and searcheable in Google
« on: January 10, 2017, 13:39:47 pm »
Hello.

We have the following problem. I block all permissions for Public and user must register for buy, but order details and invoice are public and searcheable in Google. You can check if put following URL for example: http://www.parapandaecorock.com/index.php?option=com_virtuemart&view=invoice&layout=invoice&tmpl=component&virtuemart_order_id=92&order_number=LUBB076&order_pass=p_soNmwxeK

Can someone help me please?


finngu

  • Beginner
  • *
  • Posts: 13
Re: Order details and invoice are public and searcheable in Google
« Reply #2 on: January 25, 2017, 15:58:20 pm »
We have the same problem!
When searching on Google for "ftsu bestilling" you get this:

https://www.google.dk/search?q=ftsu%20bestilling&oq=ftsu%20bestilling&aqs=chrome..69i57.6984j0j8&sourceid=chrome&ie=UTF-8

The first 2-3 hits are actual live invoices from our webshop.........

I really need to find out how to solve this!?!

I hope someone can send us in the direction what to do?

Thanks
Finn


finngu

  • Beginner
  • *
  • Posts: 13
Re: Order details and invoice are public and searcheable in Google
« Reply #3 on: January 26, 2017, 02:13:11 am »
Hello.

We have the following problem. I block all permissions for Public and user must register for buy, but order details and invoice are public and searcheable in Google. You can check if put following URL for example: http://www.parapandaecorock.com/index.php?option=com_virtuemart&view=invoice&layout=invoice&tmpl=component&virtuemart_order_id=92&order_number=LUBB076&order_pass=p_soNmwxeK

Can someone help me please?

Have you found a solutions for this?
We have the same problem.....

Finn

Milbo

  • Virtuemart Projectleader
  • Administrator
  • Super Hero
  • *
  • Posts: 8629
  • VM3 ready to take off
    • VM2 Extensions
  • VirtueMart Version: VirtueMart 3 on joomla 3
Re: Order details and invoice are public and searcheable in Google
« Reply #4 on: January 27, 2017, 23:44:34 pm »
you provide the order password within the link and so you can open the order. We hardened this part a bit, you may install http://dev.virtuemart.net/attachments/download/1029/com_virtuemart.3.0.18.6_extract_first.zip
I should fix your bug, please support the VirtueMart project and become a member
______________________________________
Extensions approved by the core team: http://extensions.virtuemart.net/