security loophole??

[styledata]

I just noticed that when I print an invoice from either the 'order' module or the 'super order' module, the path to my admin directory prints at the top of the page, thus exposing the name of my admin directory!!
I am trying to figure out what page controls that, so that I can remove it. Can anyone direct me?


Found the answer... It is controlled by browser settings. I disabled printing the header in the browser and that did it. I do wonder, though, if a code revision could prohibit this in the first place. I wonder how many have noticed this or simply NOT noticed it, and sent out invoices with the path to their admin directory on them. Perhaps this warning should be added to the security setup page .


Thanks

[stagebrace]

Good point. I added this subject to the wiki at
http://www.zen-cart.com/wiki/index.p...ecommendations