OLD Super Orders 2.0 (See v3.0 thread instead)

[tommyboybid]

I've now solved the problem, and the module appears to be working well. (My mistake was too dumb to mention here.)

Thanks so much for the contribution!

Quote:
Originally Posted by dkoehler View Post
I've run in to a problem trying to install the Super Orders module. I uploaded the Catalog files and (as far as I can tell) ran the SQL file. Super Orders does show up as entry under the Configuration menu in the Admin console, but when I went to install the Purchase Order module, it doesn't show up as an option under Modules / Payment. What did I do wrong?
dkoehler is offline

I have this very same issue, the op does not state what he did to solve the problem

And now i am feeling really dumb, if it is a simple issue i have overlooked

can anyone help me with this

[tommyboybid]

pk sorted it, uploaded files to incorrect directory, the readme in not 100% clear, plus i should have read it better

[davale]

I've installed the security_patch_v138_20090619 yesterday and now when I try to modify Order Payment Data using the 'Modify'-button it sends me to the Admin homepage instead of displaying the actual payment details. "Remove" on the other hand does seem to work!?

Anyone else experience and maybe solved this? I seem to have missed one upgrade (using rev 46) so I'll upgrade as soon as possible to rev 47 to make sure it isn't related to that.

[philip_clarke]

Super orders is not actively maintained and is full of security holes. There's at least one instance where 1.3.8 has stopped functions within it when you are searching for <= something as it strips out the < sign. My personal opinion is that it should be removed from the download section until a maintainer is found but I run more than 30 modules and apparently some of the features are going to be put into ZC 2.0 but it comes as no surprise that fixing a hole in ZC in general would wipe out function in super orders. Anyone is free to post an updated version if they solve the issues as the original maintainer has no further interest in it.

[EmilyB]

Greetings!

I'm using ZC 1.3.8a with PHP 5.2.9

I installed SuperOrders according to the directions, and when I go to Customers/Super Orders, it comes up with a blank page. In fact, every related page (except the configuration page) comes up blank. When I look at the source of the blank page all it says is:

<!-- SHTML Wrapper - 500 Server Error -->

The error logs provide no clues. We're using BlueHost as our web host, if that makes a difference.

Even if I make the very first line of code in super_orders.php 'print "Made it here!";' it doesn't do anything but give the error above.

The only other module I've installed is Export Shipping Information.

Any ideas? Thank you!

Emily

[philip_clarke]

That is most likely to be that you have uploaded the files with the wrong permissions on them and the webserver either cannot read them or thinks the permissions are not strict enough. In your ftp program right click the files and see what it says, the ownership and permissions should be the same as your existing files that work. a 500 error is web server related not PHP based.

Thank you
Philip

[EmilyB]

That is most likely to be that you have uploaded the files with the wrong permissions on them and the webserver either cannot read them or thinks the permissions are not strict enough. In your ftp program right click the files and see what it says, the ownership and permissions should be the same as your existing files that work. a 500 error is web server related not PHP based.

Thank you
Philip

Philip, thank you so much!! The problem was too much permissions. They came in the archive as rw-rw-r and when I set them to rw-r-r everything started working. I would never have figured that out, so thank you again!!



Emily

[JTheed]

I've installed the security_patch_v138_20090619 yesterday and now when I try to modify Order Payment Data using the 'Modify'-button it sends me to the Admin homepage instead of displaying the actual payment details. "Remove" on the other hand does seem to work!?

Anyone else experience and maybe solved this? I seem to have missed one upgrade (using rev 46) so I'll upgrade as soon as possible to rev 47 to make sure it isn't related to that.

Rev 47 will not correct the problem.
The new security patch file located in /youradminfolder/includes/init_includes is looking to see if you are using a 'get update', which the Modify Command uses. A quick work around until the problem is actually solved would be to remove ',update' from line 16 in the security file.

if (isset ( $_GET ['action'] ) && in_array ( $_GET ['action'], array ('save', 'layout_save', 'update', 'update_sort_order', 'update_confirm', 'copyconfirm', 'deleteconfirm', 'insert', 'move_category_confirm', 'delete_category_confirm', 'update_category_meta_tags', 'insert_category' ) ))

I realize that this defeats one purpose of the patch, but as I said, this is just a Quick Work Around.

[philip_clarke]

Please Please Please take over this module. Remove all of the keywords like "update" and the one that does <= and gets clobbered by 1.3.8's security

[davale]

Rev 47 will not correct the problem.
The new security patch file located in /youradminfolder/includes/init_includes is looking to see if you are using a 'get update', which the Modify Command uses. A quick work around until the problem is actually solved would be to remove ',update' from line 16 in the security file.

Thanx JTheed for this workaround. Tried it and indeed the function is restored. Still wondering if I should leave it out or let security prevail.