PayPal error email notification to over 200 customers

[nastal]

Our virtuemart store sent following email with error notification to over 200 customer:

Hello,
An error with your payment method paypal on your store {storename}. The details are logged in the file paypal.1.log.php
. The VirtueMart Team

Most unpleasant thing is what our customers shouldn't receive such emails, because no one of them are store admin or vendor. Error in paypal.1.log.php is about some paypal IPN connection, but it's not so important in this case, as unexpected emails to our customers.

I've checked vmpsplugin.php and sendEmailToVendorAndAdmins function, line 670:

Code Select Expand

$query = 'SELECT name, email, sendEmail FROM #__users WHERE sendEmail=1';

so I believe, this line is a point, why notification have been sent not only to admins, but also to customers.

I've changed temporarily to

Code Select Expand

$query = 'SELECT name, email, sendEmail FROM #__users WHERE id=108'; //108 is admin id

Please, check.

Our system --
PHP Version:           5.3.27
Joomla! Version:   Joomla! 3.3.6 Stable [ Ember ] 01-October-2014 02:00 GMT
VM version:               3.0.2

[AH]

You have completely outdated versions of VM and Joomla

Both are insecure and should be updated.

Your php version is also very old and insecure.

[nastal]

You have completely outdated versions of VM and Joomla

Thanks, I know. But I've checked this function in last version of VM, it remains the same.

[GJC Web Design]

$query = 'SELECT name, email, sendEmail FROM #__users WHERE sendEmail=1';

but in Joomla speak "sendEmail" means send admin emails....  Receive System Emails...

[nastal]

Thanks GJC,
I thought this option about all emails sent by system 
Ok, I will update this option in database user table.
Please, close this topic.

[Milbo]

I wonder how it happens that your users have sendEmail 1