After update from 3.2.12 to 3.2.14 direct link to orders does not work anymore

Started by gba, June 05, 2018, 16:31:01 PM

Previous topic - Next topic

Milbo

Quote from: Jörgen on June 07, 2018, 12:14:40 PM
I guess it works this way:

  • None = No one gets acccess to order links
  • Only for registered shoppers = Registered shopper get access to order link
  • Registered and guest shoppers = Registered shopper and and guest shopper get access to order link
  • Provide link for guest shoppers = Provide link only for guest shoppers
"The order link for guest shoppers allows them to see their order without login and further checks. The mode 'Registered and guests shoppers' provides more security and prevents that guest shoppers can see orders of registered shoppers."

2. It means we set a link with "virtuemart_order_id", which is not revealing the ordernumber or anything similar, only for registered.
3. We use the link for registered as in 2nd, but not for guests.
4. The old system, the email just provides a link to access an order without being logged in.

Actually 3. is almost the best, we just need an extra feature, which blocks the guest auth check after 2 weeks.
Should I fix your bug, please support the VirtueMart project and become a member
______________________________________
Extensions approved by the core team: http://extensions.virtuemart.net/

gba

Hi!

Thank you for your explanation.
Actually, what is the difference between option 2 and 3?
Both are not for guests ...

Kind regards,
Gerald

Milbo

3. Guest shoppers get the old link, but not registered ones. Imho.
Should I fix your bug, please support the VirtueMart project and become a member
______________________________________
Extensions approved by the core team: http://extensions.virtuemart.net/