Ceon Back In Stock Notifications 3.0.0

Updates:

• PHP 7 style constructors
• Fixed pagination on List all products with subscriptions page
• Added product ID to List all products with subscriptions, List all subscriptions pages

Over the years I have made a lot of modifications to this (multilanguage and attribute-handling to name the only things I can remember offhand), that I never got round to adding into the plugin. I hope to do it at some point, so there is now a GitHub repository for this:

https://github.com/torvista/Zen_Cart-Back_in_Stock_Notifications

The url should be added to the entry for this in the Plugins.

At the moment there are no changes from the Plugin v12 version.

Please report any new issues in GitHub.

Thanks for doing this. The Github link in Plugins has been set to your repo.

Using zc157c

On the product_info_display page I am seeing two messages for the notification reminder. These messages are defined as
BACK_IN_STOCK_NOTIFICATION_TEXT_PRODUCT_LISTING_FORM_LINK (Line 26) and
BACK_IN_STOCK_NOTIFICATION_TEXT_FORM_LINK (Line 36) in the file
includes\languages\english\extra_definitions\back_in_stock_notifications.php

Line 26 To be notified when this product is back in stock please click here.
Line 36 To be notified when this product is back in stock please click here.

With the Back In Stock Notifications settings: Enable/Disable Back In Stock Notification = 1 + Back in Stock requires login= 1
the outcome is correct and only the value of BACK_IN_STOCK_NOTIFICATION_TEXT_FORM_LINK from line 34 is displayed.

With the Back In Stock Notifications settings: Enable/Disable Back In Stock Notification = 1 + Back in Stock requires login= 0 the outcome is as listed above.

I have been through the files multiple times and cannot work out were the second value, possibly a concatenation, i s coming from.

Environment: zc157c, vanilla

My solution is to change the Back In Stock code block number 1 which is required in tpl_product_info_display.php after

 echo $display_qty;
      echo $display_button;

from ```
// BEGIN CEON BACK IN STOCK NOTIFICATIONS 1 of 2
if (!is_null($product_back_in_stock_notification_form_link)) {
echo '<p>' . $product_back_in_stock_notification_form_link . '</p>';
}
// END CEON BACK IN STOCK NOTIFICATIONS 1 of 2

to

// BEGIN CEON BACK IN STOCK NOTIFICATIONS 1 of 2
if ((BACK_IN_STOCK_REQUIRES_LOGIN == '1') AND (!is_null($product_back_in_stock_notification_form_link)) ) {
echo '<p>'. $product_back_in_stock_notification_form_link . '</p>';
}
// END CEON BACK IN STOCK NOTIFICATIONS 1 of 2

This plug-in generates a lot of returning purchases.

The double output is indeed a bug
https://github.com/torvista/Zen_Cart-Back_in_Stock_Notifications/issues/5

to be fixed shortly.

On GitHub I've made some changes, including a bug fix for the above.
These should, as always, be tested on a development site by those who are interested...

Some files are removed in the current download, as are no longer necessary for Zen Cart 1.5.7.
Users of other versions should not try this out before upgrading as no support will be given for obsolete versions of Zen Cart.

Any update or progress on adding a CAPTCHA or something to prevent anonymous users from abusing the form?

What is happening is that anonymous people are entering a real email address in the TO field, but they're formatting in a way to send their spam links as part of the name.

See this screenshot example:
https://i.postimg.cc/c15tMdZj/screenshot-132.png

So what is happening is that the module is still sending these notification emails from our authorized domain and IP.......but it has the abusive spam link in the person's name being sent to another email address.

We were getting BOMBARDED with a ton of this happening and temporarily had to remove the module. But we love it and want it back, so is there anyway to either 1) prevent the form from sending without a CAPTCHA or B) prevent it from sending spam links in the name field?

NOTE: We do have a simple captcha script that we use, but I didn't know how to add it to the existing module since the form appears to be created in the CeonXHTMLHiTemplate and I didn't want to mess with that and break it!

To add to my post above, maybe a solution could be to insure that there are no links (www. or http strings) in the Name field before submitting. That is how these scammers seem to be getting around it.

Of course, that wouldn't prevent someone from still using the form to just spam Out Of Stock emails to people, but it would prevent them from distributing malicious links in the Name field which show up in the body of the recipients message.

maybe a solution could be to insure that there are no links (www. or http strings) in the Name field before submitting
I think that would be the first step.

Post the issue on the Github

https://github.com/torvista/Zen_Cart-Back_in_Stock_Notifications/issues

and if you could add a screenshot image of a list of example bad urls to filter, that would help.

torvista:

I think that would be the first step.

Post the issue on the Github

https://github.com/torvista/Zen_Cart-Back_in_Stock_Notifications/issues

and if you could add a screenshot image of a list of example bad urls to filter, that would help.

Done! Although I should note, and I'm ashamed to say......I was using an older version of the module. I just updated it to the latest and I noticed that it's now mandatory to be signed into a real account in order to sign up for the In Stock Notification......and it also appears that this new module does away with the ability to enter both a Name and Email on the form.

So you might be able to ignore the GITHUB issue that I posted since this might just accomplish everything that the updated mod is doing.

it's now mandatory to be signed into a real account in order to sign up for the In Stock Notification

Not my version!
But, the history of this is me customising it to death long ago for multi-language, attributes (almost) and better admin, before only recently opening a Github with the intention of incorporating these changes and updating it for php8.1 and ZC158. Which has not happened.
So, it appears I am not familiar with the functionality of what is in Github.
But, I would be suprised if it demanded an account for a subscription, that is a customer killer.

torvista:

Not my version!

Your version doesn't require the signing in with a real account? The version I installed was "Ceon Back In Stock Notifications" from the Plugin page. It's the version that now has the "modules/ceon_bis_form.php" file. The older version I had didn't have this.

All I did was install this latest version listed under the Plugin page and by default, it requires you to now be signed into an account before you can sign up for an In Stock Notification.

torvista:

But, I would be suprised if it demanded an account for a subscription, that is a customer killer.

I agree that this is inconvenient to new (non-registered) users......but it also seems to address the issue of anonymous users who use the ungated form to send the In Stock Emails to whatever email they want, and whatever name they want to use.

Hi All

I have recently upgraded my website to ZC v157. I have been using Ajax BIS with the old version but it seems it has not been upgraded for v157 and therefore I switched to CEON BIS. (Which I also think is better as it deletes notifications from the db after being sent)

I did all the necessary file merging and everything installed well. However, I have encountered a strange problem: When I run the notification for a product that is back in stock, it not only deletes that specific notification, but all the data (ie for other products and customers) in the back_in_stock_notification_subscriptions table! (Luckily I made backups before testing).

Has anyone encountered this? (Searching on the forum did not provide any results?). Or does anyone know where I can start looking for the problem (I am only an amateur-grade pHp coder).

Any help will be appreciated!

That is not a problem I have ever seen.
I have a heavily-modified version in use on my site, and a lightly-debugged Plugin version on my Github which you should try.

torvista:

That is not a problem I have ever seen.
I have a heavily-modified version in use on my site, and a lightly-debugged Plugin version on my Github which you should try.

Thanks for the reply, I will have a look at the Github version...

Update on the above:
I noticed that all the 'id' values in the back_in_stock_notification_subscription database table were set to 0. Ticking the Auto Increment box for the 'id' field in database table solved the problem.
Still have no idea how the problem happened in the first place....

If you are getting spam through the BISN form on the product page, either you can force customers to login first or try a Captcha.

I have recently updated

BISN
https://github.com/torvista/Zen_Cart-Back_in_Stock_Notifications

and Google ReCaptcha
https://github.com/torvista/Zen_Cart-Google_reCAPTCHA

to work together.

What is the purpose of all the '200 for compare.php' files located in the 'files\includes\templates\responsive_classic CLONE\templates' directory?

This "plugin" is like most "plugins": it is not plug-in...it needs modifications to core files.

Those core files change as development moves on...so the modified plugin file becomes a mixture of old code and plugin code.

The "200 for compare" file is a snapshot of the core file used at the time (Zen Cart 200) as the base before adding the plugin code....so in the future you can compare to the current core file and see what was added just for the plugin and what should be updated due to development.