Hi,
The URL is right encode in HikaShop.
If I call the url :
woodencanvas.nwtechworx.com/prints-on-wo...-100/thumbnail_y-100
I got a page which tell me
YOU HAVE AN ERROR IN YOUR SQL SYNTAX; CHECK THE MANUAL THAT CORRESPONDS TO YOUR MYSQL SERVER VERSION FOR THE RIGHT SYNTAX TO USE NEAR 'AND PHOTOGRAPH = 'UPLOAD-YOUR-PHOTOGRAPH.PNG'' AT LINE 1 SQL=SELECT ORDER_ID FROM WOOD_HIKASHOP_ORDER WHERE ORDER_USER_ID= AND PHOTOGRAPH = 'UPLOAD-YOUR-PHOTOGRAPH.PNG'
Which is partially logicial because I'm not logged in your website.
So the best is to modify the file "administrator/components/com_hikashop/classes/file.php" and replace
$this->database->setQuery('SELECT order_id FROM '.hikashop_table('order').' WHERE order_user_id='.hikashop_loadUser().' AND '.$field_namekey.' = '.$this->database->Quote($name));
By
$this->database->setQuery('SELECT order_id FROM '.hikashop_table('order').' WHERE order_user_id='.(int)hikashop_loadUser().' AND '.$field_namekey.' = '.$this->database->Quote($name));
It order to force the value of hikashop_loadUser and display a 0 if not logged.
Regards,