Big Problem with osCommerce QUANTITY FIELD

[fsiano]

Hey Guys,

I was doing a little testing on my shop and go to find out I found a problem....kind of a no brainer but it can def add to fake orders.

If you go to your shopping cart and in the quantity field add in a number like:

2232323232223

to lets say, the Matrox G400 32MB*** card.

Before you know it, your total per card is: $1.09

 

Now I know this isn't a huge ordeal but I can definitely see people screwing around like this. I doubt they will place their order though because some of the shipping quotes are up to $52,095,102,219,890.59. BUT the early am ones and stuff are only a few dollars.

 

Anyone know an easy fix for this? is this known problem?

Please fill me in

Thanks

Frank S

[Ajeh]

You could add maximums on the qty box so this cannot happen.

[billybrag]

where is this done please, it will help me lots

[Acheron]

Assuming there is nothing built into osC for this, simply look in all files that use a quantity box (i.e. product_info.php) and edit the end of the code to include a maxlength ...

 

For example:

 

tep_draw_input_field('quantity', '1', 'SIZE=2 maxlength=2')

[billybrag]

so there isnt anywhere where the box itself is defined, so that i can set it so that it is effectivly read only

[ozcsys]

so there isnt anywhere where the box itself is defined, so that i can set it so that it is effectivly read only

There is a contribution that adds a dropdown box which you can admin to how many the customers can order. It is called

DROP DOWN BUTTON IN SHOPPING CART

[billybrag]

the rerason i want to lock it is because all the products are unique, so if i limit the drop down menu to 1 say, will this kind of disable the drop down? and hence the quantity, or will it still be a drop down with only one option?

 

cos if its the second that will look a bit tacky

[Acheron]

so there isnt anywhere where the box itself is defined, so that i can set it so that it is effectivly read only

Well the solution I mentioned above would prevent users from adding anything over 99 of each item to the cart ... you could of course limit it to 9 per item even if you sell the type of products where it would be unlikely they would want more.

 

Now if you just wanted to forbid users from using the quantity box at some point ... though I'm not sure why in the case of a store ... that can be done easily as well. i.e. I run a forum elsewhere and on edit, there are certain fields I didn't want users to edit so I wrote a little code so that they can see it but can't edit it.