A customer checked out with out pay?

Hello, I got this proble this morning.
A customer had selected a product he wanted, and checked out and the product minimum price is from £12.35, but some how it's £0 on the confirm mail.

And I got paypal as the only payment method.
And the thing is he is from Turkey, so my guess it dont understand the letters he has typed?

Is this a bug?
Any way to fix?

Here is the ordermail:

Order Confirmation from ******

mehmet kandırmaz

Thanks for shopping with us today!
The following are the details of your order.

Order Number: 12
Date Ordered: Tuesday 04 September, 2007 Detailed Invoice:

Products

1 x Counter-Strike | 1000 Tickrate 10 Slots (CSO102) = £0.00
Contract Term 1 Month
Server Name mehmet
State Private
Configuration files I am new
Branding Branded
Free TeamSpeak 10 Slot Yes

Sub-Total: £0.00
Free Shipping: £0.00
Total: £0.00

Billing Address

maho
mehmet kandırmaz
5/4 gölbaşı
gölbaşı line
adıyaman, 02500
gölbaşı, Turkey

Payment Method

Gift Certificate/Coupon

This E-mail address was given to us by you or by one of your partners. For any questions regarding this E-mail message itself, you can send an E-mail to ******

Copyright (c) 2007 ******.

Office Use Only:
From:
Email:
Login Name: ****** kandırmaz
Login Email: ******@hotmail.com
Telephone: ******
IP Address: ****** - ******
Host Address: ******
Date and Time: Tue Sep 4 2007 7:14:56 BST

what version of ZC are you using?

Thank you for the reply.

Zen Cart 1.3.7

But I had a look on the Database.
Very weird...

payment_method:
Gift Certificate/Coupon

payment_module_code:
GV/DC

Its should have been PayPal, but for some how he has managed to select an option that is really not possible to select?
Any ideas how?

Thanks, Johan.

I'm not sure but I recently had a hack attempt that looks very similar to this. Check your admin log and your coupon list, gift certificate list. See if there is something strange there.

There is no coupon with 100% off, or any gift cards.

And according to the admin activity log, there has nothing from 7am to 8am when the order was placed.

So maybe its an exploit he has managed to use via the address bar or some thing?

Dr Byte or some of the developers would be more familiar with this. In the mean time, make sure you have updated all the security patches for ZC 1.3.7. And contact that customer, explain the situation to him/her. Depending on the reply in most cases you can guess if he/she is a hacker or not.

FG-JOHAN,

Check out this thread:
http://www.zen-cart.com/forum/showthread.php?t=59190

I don't understand how your product prices were set to 0.00. What's the price supposed to be ?

If freecharger is enabled, and the price was legitimately 0.00, then freecharger will be registered as the payment method.
If an order's final total is 0.00 due to discounts etc, and the freecharger module is disabled, Zen Cart will register payment as GV/Coupon.
If an order's final total is greater than zero, then payment must be collected, so the registered payment module will be used to collect funds.

So, I think the problem in this case is that your line-items are coming up as 0.00.

What currencies do you have enabled on your store? What are their exchange rates set to?
What taxes are configured? What are their rates, and what zones do they apply to?

I don't understand how your product prices were set to 0.00. What's the price supposed to be ?

The product minimum price is from £12.35, but some how it's £0 on the confirm mail.
And he have not used any coupon code, and I have none giftcards activated.

-What currencies do you have enabled on your store?
I have only added GBP (only one I use), USD, EUR.

-What are their exchange rates set to?
GBP: 1.0
USD: 1.0
EUR: 0.78109998

But I dont use USD or EUR, so I dont know if they are any good for this conflict.

-What taxes are configured?
Well Taxable Goods Florida 7% is the only one added.
I have not added Tax on any products on the website.

And I have e-mailed the customer, but he has not replyed yet.

Thanks, Johan.

FG-Johan:

it's £0 on the confirm mail.

Is it also £0 in your admin ?

FG-Johan:

Zen Cart 1.3.7Have you installed the latest PayPal patch ?
http://www.zen-cart.com/forum/showthread.php?t=56216

Also, turn on debug logging in case it happens again so that we can find out more about what exactly happened.

Do you have "Express Checkout" enabled, or just PayPal IPN ?

It says £0 on admin yes.

No I have not installed the latest patch.
And can I install the "PPEC-137-patches-June17.zip" and I dont need to install the previously patches?

-Also, turn on debug logging in case it happens again so that we can find out more about what exactly happened.

Where can I find that option?

-Do you have "Express Checkout" enabled, or just PayPal IPN ?

Just the PayPal IPN, the express checkout mess my layout.

Thanks, Johan.

Ok I have now updated to the latest patch.
And I found the debug login, but it was set on "true"?

Do you have any logs in the paypal logs folder?
http://www.zen-cart.com/forum/showthread.php?t=61199

No sorry the folder did not have write premission.

Any way I talked to thar customer, (hard one) he was talking english/turkyish, and was not any information full.

He said "I have no money"
"sorry dont got counter"
"Dont know server"

Heh so I dont know. but he was not any good at english and did not understand what I was talking about.

Well I have deleted his order and will wait and see if it happends again.

Thanks for all help. :)