Posting in the Magento forums has been disabled pending the implementation of a new and improved forum solution which should better serve the community.

For new questions please post at magento.stackexchange.com, the community-run support site for the Magento community. We will be providing updates on the new forum solution soon. For questions or concerns please email community@magento.com.

Magento Forum

Security issue: user can see other customers order
 
brisk
Jr. Member
 
Total Posts:  22
Joined:  2009-05-02
 

Magento version: 1.3.2.3
Store config: 2 stores share one back end.

User 1 is registered user, user 1 places an order and paid it.  Later on, user 2 (guest user), place a order, and in user 1’s account, user 2’s order also shows up.

Any one experienced this issue?

thanks

 
Magento Community Magento Community
Magento Community
Magento Community
 
adjees2
Jr. Member
 
Total Posts:  10
Joined:  2010-05-24
 

Hi,
Did you solve this issue?  I am having the same issue, customers can see the last customer order information.  please advice!

Thank you
adjees

 
Magento Community Magento Community
Magento Community
Magento Community
 
audiosymmetry
Jr. Member
 
Total Posts:  9
Joined:  2009-09-02
 

Also having this exact issue, Magento v 1.3.2.3. The fact that I’m not the only one experiencing this issue is a major red flag. Customers are able to see each others’ card card info, I could get sued over a magento bug.

 
Magento Community Magento Community
Magento Community
Magento Community
 
audiosymmetry
Jr. Member
 
Total Posts:  9
Joined:  2009-09-02
 

Also having this exact issue, Magento v 1.3.2.3. The fact that I\\\’m not the only one experiencing this issue is a major red flag. Customers are able to see each others\\\’ card card info, I could get sued over a magento bug.

 
Magento Community Magento Community
Magento Community
Magento Community
 
fr0x
Member
 
Total Posts:  59
Joined:  2009-05-20
 

Take a look here as well:
http://www.magentocommerce.com/boards/viewthread/193847/

 
Magento Community Magento Community
Magento Community
Magento Community
Magento Community
Magento Community
Back to top