Gift Certificate Problem

[Ripper]

Hi, I have a cart owner who asked about gift certificates. He is having issues with them. I see he has not set up an item in the cart for gifts, but he says he is sending them as a test to himself and his balance shows as follows:
[FONT=verdana]Your Gift Certificate balance is: $18,789.50[/FONT]
[FONT=verdana]He also says it sends 2 certificates instead of one. After checking the admin page, I see he has created and sent a few to himself, but like I said, there is no gift item in the cart. Normally, I don't get involved in store management, but this seemed like a technical issue, especially the 2 for 1 issue...... Any ideas where to start? Is this normal?[/FONT]

[Ajeh]

Look in phpMyAdmin at the following database tables and what do you see:
coupons
coupon_email_track
coupon_redeem_track
coupon_gv_customer

[Ripper]

coupons:

"1";"G";"7fd0f00bfc";"10000.0000";"0.0000";"0001-01-01 00:00:00";"0001-01-01 00:00:00";"1";"0";NULL;NULL;NULL;"N";"2009-12-22 20:03:20";"0001-01-01 00:00:00";"0"
"2";"G";"1ad2be5a45";"10000.0000";"0.0000";"0001-01-01 00:00:00";"0001-01-01 00:00:00";"1";"0";NULL;NULL;NULL;"N";"2009-12-22 20:03:20";"0001-01-01 00:00:00";"0"
"3";"G";"a5b7144f04";"5.0000";"0.0000";"0001-01-01 00:00:00";"0001-01-01 00:00:00";"1";"0";NULL;NULL;NULL;"N";"2009-12-22 20:22:58";"0001-01-01 00:00:00";"0"
"4";"G";"e0d026ba02";"5.0000";"0.0000";"0001-01-01 00:00:00";"0001-01-01 00:00:00";"1";"0";NULL;NULL;NULL;"Y";"2009-12-22 20:22:58";"0001-01-01 00:00:00";"0"
"5";"S";"Free Shipping";"0.0000";"100.0000";"2009-12-22 00:00:00";"2010-01-01 00:00:00";"0";"1";;;NULL;"Y";"2009-12-22 21:51:43";"2009-12-22 21:51:43";"2"


coupon_email_track (e-mail addresses removed):

"1";"0";"0";"Admin";NULL;"email";"2009-01-04 15:10:56"
"2";"0";"0";"Admin";NULL;"email";"2009-01-06 14:53:35"
"3";"0";"0";"Admin";NULL;"email";"2009-01-18 19:41:20"
"4";"1";"0";"Admin";NULL;"email";"2009-12-22 20:03:20"
"5";"2";"0";"Admin";NULL;"email";"2009-12-22 20:03:20"
"6";"3";"0";"Admin";NULL;"email";"2009-12-22 20:22:58"
"7";"4";"0";"Admin";NULL;"email";"2009-12-22 20:22:58"

coupon_redeem_track:

"1";"1";"2";"2009-12-22 20:05:21";"68.200.247.50";"0"
"2";"2";"2";"2009-12-22 20:10:42";"68.200.247.50";"0"
"3";"3";"2";"2009-12-22 20:23:10";"68.200.247.50";"0"
"4";"5";"263";"2009-12-23 10:00:12";"66.211.170.66";"1368"
"5";"5";"537";"2009-12-24 09:49:33";"66.211.170.66";"1370"

coupon_gv_customer:

"2";"18789.5000"

[Ajeh]

Could you search the table: admin_activity_log for the ip_address:
68.200.247.50

what admin_id are on those records?

Then, browse the admin table, and see which login that is ...

[Ripper]

That is the IP address of the site owner. He is the only other forum admin.

[Ajeh]

From the coupons table, this is showing 2 coupons made for 10000.00 each:

"1";"G";"7fd0f00bfc";"10000.0000";"0.0000";"0001-01-01 00:00:00";"0001-01-01 00:00:00";"1";"0";NULL;NULL;NULL;"N";"2009-12-22 20:03:20";"0001-01-01 00:00:00";"0"
"2";"G";"1ad2be5a45";"10000.0000";"0.0000";"0001-01-01 00:00:00";"0001-01-01 00:00:00";"1";"0";NULL;NULL;NULL;"N";"2009-12-22 20:03:20";"0001-01-01 00:00:00";"0"

They were made on the 22nd ...

You can look at the admin_activity_log and enter for the page_accessed a search for:
gv_mail.php

and see what comes up on that for that date ...

[Ripper]

OK, so basically, the site owner doesn't remember making $20,000.00 worth of coupons..... I'll tell him to cut it out.....
Thanks for the help..

[Ajeh]

I was just trying to find a pattern that might help you confirm who and when this was done and who did it ...

Tracking the information might have helped determine this ...

[Ripper]

It helped in a different way...

There are no other people who could have done this, but the site owner didn't realize that his $10,000.00 gift certificates were real....... He thought he was "testing" that feature. A little too much knowledge is dangerous in the wrong hands.......

Thanks again for the help.