Jump to content

convict

Member
  • Posts

    1,302
  • Joined

  • Last visited

  • Days Won

    1

Posts posted by convict

  1. $productListQuery = "SELECT ".$glob['dbprefix']."CubeCart_cats_idx.cat_id, ".$glob['dbprefix']."CubeCart_cats_idx.productId, productCode, quantity, description, image, price, name, popularity, sale_price, stock_level, useStockLevel FROM ".$glob['dbprefix']."CubeCart_cats_idx INNER JOIN ".$glob['dbprefix']."CubeCart_inventory ON ".$glob['dbprefix']."CubeCart_cats_idx.productId = ".$glob['dbprefix']."CubeCart_inventory.productId WHERE ".$glob['dbprefix']."CubeCart_cats_idx.cat_id = ".$db->mySQLSafe($_GET['catId'])." ORDER BY ".$glob['dbprefix']."CubeCart_inventory.name ASC";

  2. Thanks for the suggested fix convict. Tho I am not sure why you suggest a change to gateway.inc.php. If the following is in 3.0.11 in cart.inc.php:

    // check the user is logged on

    if(($_GET['act']=="step2" || $_GET['act']=="step3" || $_GET['act']=="step4" || $_GET['act']=="step5") && $ccUserData[0]['customer_id']<1)

    {

    header("Location: cart.php?act=step1");

    exit;

    }

    Wouldn't it be better just to stick with this?

    The get variable ACT with content STEP5 is never used in cart.inc.php. Just have a look into cart.php:

    		case "step5":
    
    			include("includes/content/gateway.inc.php");
    
    			$body->assign("PAGE_CONTENT",$page_content);
    
    		break;

  3. Well I have noticed this at our store today first time. Order disapeared from order list and yes, customer id was 0 and all invoice data were lost and order time has been changed.

    Reason: user logged out, basket is not empty (delivery data there) does hit the checkout step5 again (gateway is set) for some reason.

    Quick fix, but important. Step5 (gateway.inc.php) does not contain any check if user is logged-on.

    includes/content/gateway.inc.php

    SEARCH FOR

    require_once("classes/cart.php");
    
    
    ADD BEFORE
    
    
    
    if($ccUserData[0]['customer_id']<1)
    
    {
    
    	header("Location: cart.php?act=step1");
    
    	exit;
    
    }

    Similar code does contain cart.inc.php (since 3.0.11) with $_GET['act']=="step5", but useless - step5 is NOT there.

    :w00t:

  4. PRODUCT ID IN ADMIN NOTIFICATION EMAIL

    Open includes/content/gateway.inc.php

    SEARCH FOR

    			$prodtext .= sprintf($lang['front']['gateway']['admin_email_body_4'],
    
    						$basket['invArray'][$i+1]["name"]);
    
    
    REPLACE WITH
    
    
    
    			$prodtext .= sprintf($lang['front']['gateway']['admin_email_body_4'],
    
    						$basket['invArray'][$i+1]["name"],
    
    						$basket['invArray'][$i+1]["productId"]);
    save, close, upload
    
    
    
    Open language/en/lang.inc.php
    
    
    
    SEARCH FOR
    
    
    
    'admin_email_body_4' =>"Product: %s\n",
    
    
    REPLACE WITH
    
    
    
    'admin_email_body_4' =>"Product: %s\nProduct ID: %s\n",
    save, close, upload
    
    
    
    
    
    PRODUCT ID IN THE ADMIN ORDERS SECTION
    
    
    
    Open admin/orders/order.php
    
    
    
    SEARCH FOR (about line 169)
    
    
    
    <td class="subHead"><strong><?php echo $lang['admin']['orders']['product'];?></strong></td>
    
    
    
    
    ADD AFTER
    
    
    
    <td class="subHead"><strong><?php echo "ID";?></strong></td>
    
    
    
    
    SEARCH FOR (about line 225)
    
    
    
    <td class="<?php echo $cellColor; ?>"><span class="copyText"><?php echo $results[$i]['productCode']; ?></span></td>
    
    
    
    
    ADD BEFORE IT
    
    
    
    <td class="<?php echo $cellColor; ?>"><span class="copyText"><?php echo $results[$i]['productId']; ?></span></td>
    
    
    
    
    SEARCH FOR (about line 250)
    
    
    
    <td rowspan="4" class="btmSubNav">&nbsp;</td>
    
    
    REPLACE WITH
    
    
    
    <td rowspan="4" colspan="2" class="btmSubNav">&nbsp;</td>

    save, close, upload

    Done ;)

  5. I'm at my wit's end here....

    I've configured Linkpoint with my cart (according to instructions at Linkpoint)

    Upon making a purchase, I receive an error message saying "payment gateway variable not found"

    This page is an extension of confirmed.php

    from browser: ( confirmed.php?act=conf&f=1&oid=MDYwODA2LTE0MzIyOC01NTE5) and according to tech support at Linkpoint, my configuration is correct, so they suggested my success / failure page URLs are incorrect. Tech support also tells me that the actual order goes through, but customers won't be able to tell because they will get the same error message I get.

    Can anyone tell me what URLs I should be using for these pages?

    I thought it was supposed to be: http://mystore/shop/confirmed.php

    Is there a fix to this?

    Thanks,

    Jeff

    Success/failure page URLs are sent via form to LinkPoint central in checkout process. Dont use own ones in your LinkPoint Central account setting - you did somethig wrong in URL. This message occurs when cookies are not accesible because of another domain. The most issues are domain name in URL w/o www or w/o SSL prefix or not covered conditions when basket is empty caused call back URLs like PayPal IPN.
  6. I've resolved the problem. It was my firewall. For some reason my firewall does not like any of the shopping cart programs I've installed. I use ZoneAlarm Suite, and when I turn it off I have no problem at all.

    John

    Seems to be blocked session cookies. Please have a look into Privacy/Cookie control.
  7. Well, this is a notorious question. :rolleyes:another topic

    includes/boxes/categories.inc.php

    SEARCH FOR

    $results = $db->select("SELECT cat_name, cat_id FROM ".$glob['dbprefix']."CubeCart_category WHERE cat_father_id = 0");

    REPLACE WITH (or add red marked)

    $results = $db->select("SELECT cat_name, cat_id FROM ".$glob['dbprefix']."CubeCart_category WHERE cat_father_id = 0 ORDER BY cat_name ASC");

    What about pinned topic LOL.

  8. You have got the point! You are absolutely right this is a bug.

    The code you have mentioned:

    if( isset($_GET['redir']) && !eregi("logout|login|forgotPass|changePass",base64_decode($_GET['redir']))){
    
    
    
    
    Have to be:
    
    
    
    
    
    if(isset($_GET['redir']) && !empty($_GET['redir']) && !eregi("logout|login|forgotPass|changePass",base64_decode($_GET['redir']))){

    PM has been sent to Al.

  9. I'm interested to know more about security issues that could come about with CubeCart using email to pass customer credit card details for later processing through a manual credit card terminal in a shop.

    My Email features 256-bit encryption, which is double the usual encryption used for SSL certificates. Banks only use 128-bit, so perhaps it would seem that the 256-bit encryption is overkill - Well, perhaps not.

    So, as I'm using a tank instead of an armoured car for my email delivery, why couldn't I be using CubeCart for passing credit card details back, instead of storing details on the server (Which is more vunerable to attack?) for later manual processing, or worse still, signing up with someone like Mal's and entrusting them with the credit card details.

    Has anyone got any further comments on this? I'd like to look at both the pros and cons here. I know that the official position from Devellion at the present time is not to go ahead with a manual credit card processing MOD as part of the package, and that I can understand from server vunerabilities, but isn't my 256-bit email a different animal altogether?

    Some standard CubeCart gateways do use Credit Card details transfering - what those gateways are using? SSL. Your solution is much more secure as manual prcessing gateway stored Credit Card data on site.

    Your solutiion is comparable to standard used SSL via HTTP but remember - it depends to transer way. Email is NOT transfered direct to email box in most of cases.

  10. The processing status is the only status download links email is sent. The another story is to see customer used the download link without any click on order details.

    The best way is to see Completed status if custmer have used the link. Well, have a look at CubeCart.org there is a mod doing this automaticaly.

×
×
  • Create New...