shopping cart flaw

[stevennickelby]

I was testing the website and I found that,

 

if a customer is checking out and they are up to...

https://website/checkout_confirmation.php

 

then they paste in their browser...

https://website/checkout_process.php

 

then,

 

https://website/checkout_success.php

 

will load up....hence the customer has placed an order with out paying for it!!

 

The order is now in the system

 

does any one know of a script to stop this from happening?

 

so they can't skip the payment modules?? :(

please help

[muskokee]

I was testing the website and I found that,

 

if a customer is checking out and they are up to...

https://website/checkout_confirmation.php

 

then they paste in their browser...

https://website/checkout_process.php

 

then,

 

https://website/checkout_success.php

 

will load up....hence the customer has placed an order with out paying for it!!

 

The order is now in the system

 

does any one know of a script to stop this from happening?

 

so they can't skip the payment modules?? :(

please help

 

There is a whole discussion going on about this. search "order hack".

 

Sheri

[jasonabc]

http://www.oscommerce.com/forums/index.php?showtopic=207589