Printable View
That doesn't make sense, you had to re-sign up, because you couldn't get in contact... What is your previous username on the forum, so we can check you out..Quote:
Thank you
Philip Clarke. (former author of modules myself, I had to re-sign up because I cannot get in contact and I am getting very irritated about this
So far all you have done is make unfounded allegations..
If something smells fishy, it usually is... and you Sir smell of Tuna!!!
I Agree entirely, which is why I will do this as a proof of concept using my own name, address, telephone number etc... and as I understand it the site is not "live" to the public yet.
Look at the big royal mail module, I wrote the original, I then signed off from zen-cart after a dis-agreement with the developers.
Snowy2007 should now be able to confirm that on his clustered machine using all of the modifications that the bug is still valid. I have just "bought" some items without using worldpay, I have a confirmed order and his admin section will show that I have paid up fully through worldpay even though I never visited. The original guy who asked me to look at the module can also confirm, if you like AfterHours, and you haev a site set up with worldpay, I will gladly order items from it to show you.
Thank you
Philip.
My previous username was bouncingltd btw. and I have been around a lot longer than most, and I was the one that submitted the bug fix for the zencart database when the session stored variables were being truncated because the column was set to the wrong sort of blob. Now don't monkey around with something as serious as this, proof has been provided. I've been running up my phone bill trying to contact the developer Alan Duncan about this.
Thank you
Philip.
Erm.... He's only right!!!!!
He has just ordered 41 pounds worth of products. The order is sat waiting to be processed!
Not only did he not have to transact through worldpay but my worldpay account is set up for my other mals cart store at the moment (as the zen one isn't live yet)!!!!
Of course, we always check orders against the worldpay records anyway before we ship just to be safe but that's not the point!
He has been nowhere near worldpay yet the order is showing up in my cart as having been paid by Worldpay!!!!!!!!!!!!!!!!
Thank you Philip for showing me this.... now the only question I have is : What is the bloody solution???? LOL!
With all the hassle this mod causes, a switch to another payment system would seem to be the answer!Quote:
Originally Posted by snowy2007
I recommend not using worldpay at the moment. Yes I could solve the hole, yes it affects every installation asfaik. We now have SSL, non-SSL, and clustered Servers all with the problem. I have not told anyone how I've done it. The only thing is I don't know much about worldpay, seriously, I just decided to bypass their system entirely, so I would have to learn all about it.
I am physically disabled so I now have to rest very urgently. (I overproduce adrelanin because of chronic pain syndrome and I am shaking like a leaf). snowy2007 your bloody phone number gives me an answer machine all the time, check your email.
I can confirm that I have also spoken to Philip over the telephone now and the guy is genuine.
This flaw is very real. I am happy to give anyone who wants it my phone number if you want to talk to me.
Unfortunately, I will be going out at about 12-1ish and won't be back until about 7ish (GMT) - during that time though there may be sporadic occasions when I will have brief net access so I can keep popping on here.
Simon.
AfterHour should shortly confirm that I have bought £400 odd worth of goods without going through worldpay and that it shows up as having been paid.
I really have to rest.