Order by (new) costumer uses email address of old order

[FrankHF]

Hi,

We have this issue for the 2nd time in around 6 months, where a (new) customer orders a product, all the attributes are handled just fine, except for the emailaddress. An emailaddress from another, totally random order is then used to send the confirmation to, leading to confusion with the current customer (who doesnt receive any confirmation) and with the old customer (who is being 'spammed' with the order confirmation he didnt make).

My worries are 3-fold:

- Any applicable privacy laws?
- What could have caused this? Any weaknesses?
- How can we fix this in the future. Both Virtuemart and Joomla are up to date. We use OnePageCheckout as the cart plugin. Should i reach out to them? Has anyone else seen this before?


Thanks in advance.

[Jörgen]

Please state VM, Joomla and PHP version.

Does the email get assigned to the actual order ?

Jörgen @ Kreativ Fotografi

[FrankHF]

Hi Jörgen,

PHP version is 7.3.21
Joomla is 3.9.21
VM is 3.8.4

Yes, the emailaddress gets assigned to the actual order.

[jenkinhill]

I'd test this with you OPC turned off - but if this only happens very occasionally it will be dificult to track down.

[FrankHF]

Agreed, but due to the randomness i decided to see if anyone has seen something like this before.

Are there any logs kept when an order is placed? can i check those and where are they stored?