customer pending approved placed an order

[jagall]

HI Yeh it is the zone issue, I am using zone table and it seems counties in the second defined zone is not picking up the VAT, I have separate zones based on shipping rates, but just one overall VAT rate for the country so not sure why it does not go onto all zones

[jagall]

Hi Ajeh,
Just to fill you in. I had the tax product base set to store rather one of other two as the store and shipping address in different zones, duh

[Ajeh]

Thanks for the update ...

[jagall]

Hi Ajeh,

Sorry back to my original query. I have someone else who has just created an account and is awaiting approval but have placed an order while approval is appending? We have an option to of online bank transfer so it'll be interesting if they made the payment as shipping doesn't happen until payment is made. But why is this happening, hope you can she some light.

If the person logged on before under another name, does the admin remember the IP or something?? worried

[Ajeh]

Have you tried to create a new customer account to see if you can:

1 add to cart

2 checkout

[jagall]

thanks for getting back to me. Yes several times and it will not let be view prices or anything like that until authorisation is given so cannot understand why this and yesterday's customer got to do this. Could someone be hacking the website? or just a coincidental glitch?

[Ajeh]

You would need to check your site against clean code and look for issues that could be a tell tale indicator of a hack ...

Peek in the security forum for help:
http://www.zen-cart.com/forum/forumdisplay.php?f=133

Have you an URL that we could perhaps peek at for your site?

Could you also hit reply and answer all of the questions asked?

[jagall]

thanks Ajeh, will look at the security threads. went through the security measures earlier and I think have all in place.

Here is link to the site

Sorry did I forget to reply to some of your questions??

[Ajeh]

Found a way in ...

I can add to cart as a guest from your sideboxes as they are not setup to follow the rules of the Customer Authorization ...

Created an account and checkout without authorization ...

You need to fix those buy now buttons to follow the rules ...

[jagall]

Hi, I could see you working away and couldn't believe it. Thank you soooo much, you know never even thought of that or even tested this until now. So relieved cause really thought I had been hacked someway.
I assume there is a bit of code that will fix this for the carousel sideboxes.
Listen thanks again, really appreciate time taken in resolving this. Coffee on me...