Results 1 to 6 of 6
  1. #1
    Join Date
    Nov 2006
    Location
    New York City
    Posts
    248
    Plugin Contributions
    1

    Default Refer a Friend session ID attaching to referring email

    Hello.

    I was testing my refer a friend feature and noticed that in the email received suggesting the product, that the zenid of the user who sent the referral was attached to the product link.

    So, i couldn't find any threads on this, but are there any security concerns regarding this? If he/she who sent the referring link still had an active session, is it possible for the recipient to click on the link and be "logged-in" on the sender's account?

  2. #2
    Join Date
    Nov 2006
    Location
    New York City
    Posts
    248
    Plugin Contributions
    1

    Default Re: Refer a Friend session ID attaching to referring email

    Is this not an issue? The lack of a response has me curious...

  3. #3
    Join Date
    Sep 2003
    Location
    Ohio
    Posts
    69,402
    Plugin Contributions
    6

    Default Re: Refer a Friend session ID attaching to referring email

    What version of Zen Cart are you running?

    Is this a clean install or an upgrade? If an upgrade, from what version and how did you do the upgrade?
    Linda McGrath
    If you have to think ... you haven't been zenned ...

    Did YOU buy the Zen Cart Team a cup of coffee and a donut today? Just click here to support the Zen Cart Team!!

    Are you using the latest? Perhaps you've a problem that's fixed in the latest version: [Upgrade today!]
    Officially PayPal-Certified! Just click here

    Try our Zen Cart Recommended Services - Hosting, Payment and more ...
    Signup for our Announcements Forums to stay up to date on important changes and updates!

  4. #4
    Join Date
    Jan 2005
    Location
    UK
    Posts
    24
    Plugin Contributions
    0

    Default Re: Refer a Friend session ID attaching to referring email

    I am also seeing this on a clean install of 1.3.7 but only if the customer is using IE7. I cannot reproduce it using Firefox or Safari.

    The ZenId is appended to the product link after a colon.

  5. #5
    Join Date
    Sep 2003
    Location
    Ohio
    Posts
    69,402
    Plugin Contributions
    6

    Default Re: Refer a Friend session ID attaching to referring email

    Have you an URL to your site? This is really strange behavior to appear in the email as that is stripped out ...
    Linda McGrath
    If you have to think ... you haven't been zenned ...

    Did YOU buy the Zen Cart Team a cup of coffee and a donut today? Just click here to support the Zen Cart Team!!

    Are you using the latest? Perhaps you've a problem that's fixed in the latest version: [Upgrade today!]
    Officially PayPal-Certified! Just click here

    Try our Zen Cart Recommended Services - Hosting, Payment and more ...
    Signup for our Announcements Forums to stay up to date on important changes and updates!

  6. #6
    Join Date
    Jan 2005
    Location
    UK
    Posts
    24
    Plugin Contributions
    0

    Default Re: Refer a Friend session ID attaching to referring email

    I can't reproduce this again now. I spotted it a few days ago and it was on my list of things to look into.

    Sorry no link due to customer confidentiality.

 

 

Similar Threads

  1. Refer a friend sidebox
    By richard.rodriguez in forum Basic Configuration
    Replies: 1
    Last Post: 21 Jan 2010, 01:59 AM
  2. Reward Mod for Referring a Friend?
    By Dimascus in forum All Other Contributions/Addons
    Replies: 0
    Last Post: 24 Jul 2009, 08:20 AM
  3. refer a friend and earn money-MOD?
    By pappegoye in forum General Questions
    Replies: 3
    Last Post: 1 Jul 2009, 07:25 PM
  4. Refer a friend page or Tell a friend about website, not product
    By dealbyethan.com in forum General Questions
    Replies: 2
    Last Post: 5 Jul 2008, 11:58 AM
  5. Refer a friend page?
    By yellow1912 in forum General Questions
    Replies: 2
    Last Post: 14 Apr 2007, 10:58 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
disjunctive-egg