VirtueMart Forum

VirtueMart 2 + 3 + 4 => General Questions => Topic started by: misholini on January 16, 2018, 13:53:56 PM

Title: List orders via secret key
Post by: misholini on January 16, 2018, 13:53:56 PM
Hi,
I've noticed that viewing an order via Order number and Secret key does not work any more. Instead user is forced to login in order to view their orders, which makes this feature redundant (tracking orders via Number and secret key).
I tried this on the Virtuemart Demo site and get the same result.
If you try to retrieve the order you placed on the Demo site via Order tracking:
http://demo.virtuemart.net/orders (http://demo.virtuemart.net/orders)
You will be redirected to Login in order to view the order.
Is that feature now made redundant?

I am running on Joomla 3.8.3 and VM 3.2.12

Title: Re: List orders via secret key
Post by: Jörgen on January 16, 2018, 14:06:28 PM
Works for me with VM3.2.12 and Joomla 3.8.3

Is there some SEF routning troble ? If You click on the Ikon (for viewing order in the frontend) to the right of the ordernumber in backend, what Do You get ?

regards

Jörgen @ Kreativ Fotografi
Title: Re: List orders via secret key
Post by: AH on January 16, 2018, 14:28:32 PM
Check your setting in VM configuration

Checkout tab

Order tracking mode

Title: Re: List orders via secret key
Post by: misholini on January 16, 2018, 16:48:34 PM
Thanks AH for pointing this out!
Never knew there were such settings. That solved the problem.
Title: Re: List orders via secret key
Post by: AH on January 16, 2018, 17:22:53 PM
Hi misholini

Thanks for the update - this was a new feature added in VM

More security for function getMyOrderDetails
Title: Re: List orders via secret key
Post by: misholini on January 18, 2018, 12:03:15 PM
Hi AH,
Then is it insecure to set Order tracking mode to: "Provide link for guest shoppers" so they can access orders via order num. and secret key?
Title: Re: List orders via secret key
Post by: AH on January 18, 2018, 18:22:06 PM
It is not "insecure" 

But any user that has the information can see the order details - it is up to you how you configure your system