Gift Certificates that Admin never issued

**fattyfat** · 25 Dec 2009, 02:36 AM

Hi Everyone,
I have a client who is running the latest 1.3.8. An order recently came through using a gift certificate, leaving the payment balance of $0.00 for the order (the gift certificate value was for $50 and the order was for $46).

They told me that they have never issued any gift certificates (only coupons). Under the Gift Certificates/Gift Certificates Sent menu, it shows 4 gift certificates that were issued by "Admin" though they say they have never issued any.... The "Senders ID" is 0 and none of the admins have that for an ID.

How is this possible?

**tino.schlegel** · 25 Dec 2009, 04:45 AM

Unfortunately, the glass ball says its not possible. Well people claim a lot what they think they have done and they havent done. Fact is that its highly unlikely, that there was a spontanous database mutation in the gift voucher table that let this gift voucher appear.

How the customer got the gift voucher code or the gift certificate was connected to a customer account can not be solved.

But nothing is impossible and it's Christmas.

Merry Christmas.

**tino.schlegel** · 25 Dec 2009, 05:07 AM

Or another customer bought a gift voucher and send it to a friend as a gift.

**fattyfat** · 25 Dec 2009, 06:21 PM

No one has bought gift vouchers and the admin say they have never sent any out either.

The gift vouchers were created around the same time the coupons were. Could there be some kind of bug?

**stevesh** · 26 Dec 2009, 02:13 PM

Is it possible the site has been hacked?

**fattyfat** · 26 Dec 2009, 09:44 PM

Originally Posted by stevesh

Is it possible the site has been hacked?

That's been a possible conclusion of mine - but I haven't wanted to jump to it yet...

Is there anyway I can tell?

I checked the admin logs and did not see any "strange" logins - though I might be unsure exactly how to detect this sort of thing.