Jump to content

keat

Member
  • Posts

    1,614
  • Joined

  • Last visited

  • Days Won

    27

Posts posted by keat

  1. I doubt very much that the ICO will do anything, there's so much woolyness and mis-interpretation that many companies will fail.

    We can only do what we can do to satisfy that we appear to be doing.

  2. $TERMS_CONDITIONS

    Origin: "Smarty object"

    Value

    "https://www.xxxxxxxx.co.uk/terms-conditions.html"
     

    $TERMS_CONDITIONS_CHECKED

    Origin: "Smarty object"

    Value

    ""

    Do I need to add anything to content.checkout.php to make it appear.

    All I have at the moment is the edit to cubecart.class

  3. Debate

     

     

    So the mixed up interpretations continue.

    Today we received an email with a pdf attachment explaining GDPR and that the company requires our consent.

    It went along the lines.. "if we don't hear back from you, we will assume that we have your consent"

     

    I can argue, if you don't hear back from me, that we never received the communication, therefore you don't have my consent.

    Secondly, it was addressed to 'Dear Supplier' and then 'Dear Sir/Madam'

    Dear supplier or sir/madam is not personal identifiable data, so therefore in my eyes does not constitute GDPR protectional data.

  4. error log inside the cart shows

     

    [Exception] /home/xxxxxxx/public_html/classes/cubecart.class.php:910 - syntax error, unexpected ';', expecting ',' or ')'

     

    If I modify the end of the last line to             : '');

    I get this.

     

    [Exception] /home/xxxxxxxx/public_html/classes/cubecart.class.php:906 - Call to a member function assign() on string

     

    Although i don't understand PHP so it would be no surprise that i did wrong.

  5. I tried adding the lines to cubecart.class.php, but the page seems to hang with just a white screen.

    No errors are produced in error.log.

     

    I then went up to the suggestion above that comment and added:

    {if true || $TERMS_CONDITIONS}
       <div class="right"><span id="error_terms_agree"><input type="checkbox" id="reg_terms" name="terms_agree" value="1" rel="error_terms_agree"><label for="reg_terms">{$LANG.account.register_terms_agree_link|replace:'%s':"{$STORE_URL}/friendly_path_to_t&c_doc.html"}</label></span></div>
    {/if}

    to content.checkout.php.

    I can now get the link to open T&C's, but can still proceed to checkout without having to check the agree button.

  6. Guys

     

    I could really do with this to comply with GDPR, so if anyone could shed any light how I would enforce T&C's with each order, i'd very much appreciate any help.

    At least until i can consider any CC software updates.

     

    Adding

     

    <div class="right"><span id="error_terms_agree"><input type="checkbox" id="reg_terms" name="terms_agree" value="1" {$TERMS_CONDITIONS_CHECKED} rel="error_terms_agree"><label for="reg_terms">{$LANG.account.register_terms_agree_link|replace:'%s':{$TERMS_CONDITIONS}}</label></span></div>

     

    to contecnt.checkout.php half does the job,.

    I just could do with some help making the checkbox enforceable and a link to my T&C's pages working.

    If this means encoding the actual URL it will suffice.

  7. I found this thread.

    If I add:

    {if $TERMS_CONDITIONS}
       <div class="right"><span id="error_terms_agree"><input type="checkbox" id="reg_terms" name="terms_agree" value="1" {$TERMS_CONDITIONS_CHECKED} rel="error_terms_agree"><label for="reg_terms">{$LANG.account.register_terms_agree_link|replace:'%s':{$TERMS_CONDITIONS}}</label></span></div>
    {/if}

     

    to content.checkout.php, nothing appears.

    I remove the two 'If statements, and now the box appears.

    However, I can proceed without checking the box and when I click on the hyperlink for T&C's it loops me back to the confirm page.

    www.latexglovesonline.co.uk

  8. Further to this, I received another email this morning stating that the test endpoints are now ready.

     

    However, the email also mentions:

    As well as removing support for older TLS ciphers, we need to increase the length of the key for ciphers that use Diffie-Hellman keys from 1,024 to 2,048 bits in order to ensure a higher level of cryptographic protection. Merchants will need to ensure their integrations can support this key length. Although we can monitor which TLS ciphers merchants are using, we have no way of knowing who will be able to support the increased DH key length so merchants are strongly advised to use our test endpoint to confirm they can support the increased key length before that time. 

    On the 9th May 2018, during our regular maintenance window, we will broadcast for ONE HOUR using an increased Diffie-Hellman 2,048-bit key size. This will help us to identify merchants who are not compliant, and proactively allow us to notify you ahead of the full switch-over on 6th June. 

     

    Is this going to affect the gateway module at all.

  9. Wil

     

    Do you have ftp access. or maybe Cpanel/Plesk file manager access.

    Take a look in the root of your store, make a note of the admin folder name and the adminxxx.php file name.

    Make sure that these are entered correctly in global.inc.php

     

    when these are confirmed correct in global.inc.php, try logging in to https://www.classicbm.com/admin_whatever-its-called.php

    I tried logging in to https://www.classicbm.com/admin_TSYdCZ.php  and it's coming back a 404 error, which would indicate to me that admin_TSYdCZ.php does not exist.

  10. Could there be something missing from the php code ?

    If I add the code as it is, then code sort of becomes corrupted, the code area fills with alpha numerical data.

    Thinking it may be missing an end statement, I added  } ?> to the end, and this then causes a white screen.

     

    Tried this on another site, and again, the data becomes corrupted when I make the save.

  11. What's annoying is, after everyone has jumped up and down, panicked, made lots of changes and shoved lots of paper about, it will all blow over.

    Unscrupulous companies will still sell dodgy mailing lists, spammers and phishers will still spam and phish.

    I've no doubt that the EU will have to change some of the rules to satisfy SME's at some point.

     

    I had a customer today asking for his details to be removed, which transpired was nothing to do with GDPR, but the fact that he's no longer trading.

    However, because of GDPR, this made me think twice about protecting his data. What if it was someone else pretending to be him.

    By removing the data, I wouldn't neccessarily be protecting it. !!!

     

    Can you tell that I'm peed off with it already. . 🙂

  12. I found that if I register as a new customer, then T&C's box appears.

    If I log in, the T&C's doesn't show.

     

    I want the T&C's checkbox to appear with each order confirmation.

    I found the following line in content.checkout.confirm.php

     

    {if $TERMS_CONDITIONS}
            <div><label for="reg_terms">&nbsp;</label><span><input type="checkbox" id="reg_terms" name="terms_agree" value="1" {$TERMS_CONDITIONS_CHECKED} /> <a href="{$TERMS_CONDITIONS}" target="_blank">{$LANG.account.register_terms_agree}</a></span></div>
            {/if}

     

    are there any changes I can make so have the T&C's box appear with each order confirmation.

  13. Under 'Store Settings' - 'Layout', I have 'disable show T&C's on checkout' unchecked.

    I have a document checked as T&C's, however, I don't see any T&C's on checkout.

    I'm using the Mican skin.

    Any pointers.

     

    edit: I also tried on a Foundation skin and connot see anything there either.

  14. enable debugging in 'Store Settings' - 'Advanced'

    This may produce an output string on your web browser.

    Failing that create a new file in the root of your store called ini-custom.inc.php and paste the following code inside.

     

    <?php
    # Custom initialization commands
    # Filename: ini-custom.inc.php
    # File location: main CubeCart folder

    ini_set('memory_limit', '256M');
    ini_set('max_execution_time', '60');
    ini_set('error_log', 'error_log');
    ini_set('log_errors', 'on');

    ?>

     

    This should produce an error.log file in the root of your store, which may give some clues.

     

  15. But the legitimate interest states:   The legitimate interests can be your own interests.

     

    It's highly likely to cause debate, but as there's no hard and fast rules "so to speak", we could argue that way we interpretted the rules,  was that we have a legitimate interest to market our customers.

    However, marketing someone we never had contact with to from the onset, ie a mailing list, we would need to obtain consent.

    let me interpret the following. (my interpretation in blue)

     

    The legitimate interests can be your own interests or the interests of third parties. They can include commercial interests, individual interests or broader societal benefits.

    We have an interest to email and send catalogues to customers as a duty to keep them informed on price increases, special promotions and our new catalogue.

     

     

    The processing must be necessary. If you can reasonably achieve the same result in another less intrusive way, legitimate interests will not apply.

    The processing via email or snail mail is neccessary as we are unable to convey the information by any other means

     

    You must balance your interests against the individual’s. If they would not reasonably expect the processing, or if it would cause unjustified harm, their interests are likely to override your legitimate interests.

    How could one determine that a regular known customer, would not want to be kept informed, so we give the customer the ability to opt out during the communication campaign.

     

     

    I'm still working on the example, but if anyone wants to take a look and make any use of it, or any snippets of it, feel free.

     

    https://www.beal.org.uk/privacy-policy.html

     

     

    There are occasions when we will use your name, address and email address for marketing purposes, to develop our business and to extend the level of services available to you we believe that this is in our legitimate interest.  We always provide an ‘opt out’ option in all our marketing correspondence with you.

×
×
  • Create New...