be aware of auction product module

[zeme_09g]

hi everyone,
i'm using auction product module now , this module has a serious problem , the buyer can add " action=buy_now" at end of the product link to order it even it is still in auction , i have been cheated by two man , and they 're happy with this trick , it's kind of hack
anyone know how to avoid this , i have to disable auction product temporary
thanks

[officestar]

Wow, thanks for sharing this. I wasn't aware that this was possible with this add on. I tried this on a few auctions I have running and it is possible for a visitor to add any of these auctions to their cart even though "Buy now" isn't available. Not sure how to fix this though.

Make sure your visitors know your policy on circumventing the the auction process. Warn bidders that use this trick once or twice. However, for those that frequently use this trick, you could use category specific access restriction. I'm not sure how to prohibit customers from seeing or buying specific items or seeing specific categories.

[Davx]

zeme_09g,

Firstly this would have been more suited to the auction product type support thread.

I have looked into this and it seems that it is a global issue with zencart.

Offline products (displayed but "sold out"), again just add &action=buy_now to the url and its in your cart ready to check out.

We use url rewriting which makes it harder for the user to abuse this, but a solution would be great.

Regards

Dave

[Davx]

This is not an elegant solution...however it will stop this from happening until a solution is found:

1. Add an attribute to the auction product (colour, brown or something)

2. The attribute won't be displayed, users can still bid on the auction and use the buy it now button.

Regards