Zen Cart Logo
Forums / Reports of Security Problems / Orders merged during checkout. OPC and v1.5.5f

Orders merged during checkout. OPC and v1.5.5f

Views: 26

Results 1 to 5 of 5
20 Aug 2020, 10:41 AM
#1
mprough avatar

mprough

Totally Zenned

Join Date:
Nov 2007
Location:
Woodbine, Georgia, United States
Posts:
4,278
Plugin Contributions:
37

Orders merged during checkout. OPC and v1.5.5f

Sessions settings are all default, Zen Cart 1.5.5f and php 7.1.33 running OPC, cart has been running without issues for over a year

Order 13185 Angela XXXX (PAYPALDP) on Aug 12th
and then
Order 13186 Kala XXXXXX... (PAYPALWPP) her order had her correct name and address for customer into and billing info, BUT had Angela's info for shipping. So we shipped Kala's order to Angela.

Common for folks to order something to be shipped to someone else, so we didn't think anything of it. Until Kala just emailed us wanting to know who was Angela and why did her order go to her?

It's a very busy shop

~Melanie

26 Aug 2020, 3:15 PM
#2
mprough avatar

mprough

Totally Zenned

Join Date:
Nov 2007
Location:
Woodbine, Georgia, United States
Posts:
4,278
Plugin Contributions:
37

Re: Orders merged during checkout. OPC and v1.5.5f

More information. I cloned the live site and updated OPC. When unsuccessfully checking out because I can't get OPC working without the "Your order's details have changed. Please review the current values and re-submit." error, in the OPC full log is 13185 Angela XXXX's information.

PM me for the full log

27 Aug 2020, 3:16 PM
#3
mprough avatar

mprough

Totally Zenned

Join Date:
Nov 2007
Location:
Woodbine, Georgia, United States
Posts:
4,278
Plugin Contributions:
37

Re: Orders merged during checkout. OPC and v1.5.5f

Okay so Cindy & I had a call and she figured out how this happened. The default bill to address for guest in OPC was using Angela's info. She remembers this being a problem a while ago, but wasn't aware it shill existed. It is repaired by deleting the wrong address in the DB and running the following patches.

DELETE FROM configuration WHERE configuration_key = 'CHECKOUT_ONE_GUEST_BILLTO_ADDRESS_BOOK_ID' LIMIT 1;
DELETE FROM address_book WHERE address_book_id = 9483 LIMIT 1;

Problem solved

27 Aug 2020, 3:17 PM
#4
mprough avatar

mprough

Totally Zenned

Join Date:
Nov 2007
Location:
Woodbine, Georgia, United States
Posts:
4,278
Plugin Contributions:
37

Re: Orders merged during checkout. OPC and v1.5.5f

Oh and she will build a check for it in the next release.

27 Aug 2020, 6:51 PM
#5
drbyte avatar

drbyte

Sensei

Join Date:
Jan 2004
Posts:
63,513
Plugin Contributions:
177

Re: Orders merged during checkout. OPC and v1.5.5f

Thumbs up.
Glad you were able to sort it out with lat9.