order created with out any basic information

-- HikaShop version -- : 3.5.0
-- Joomla version -- : 3.8.9
-- PHP version -- : 7
-- Error-message(debug-mod must be tuned on) -- : none

hi

someone has been creating orders using an unpublish payment plugin and even with out comlpeting required fields such as first name last name address and more.

how could he be doing this?

i attach photos for your review

Hi,

This looks like an order that has been created with the "new" button of the orders listing in your backend.
Check the "history" area at the bottom of the order details page in the backend. It should at least tell you the IP address of the user doing this. You can check if it's not someone with access to your backend.

i already disable all accounts with admin and super

but the order still appears.

it is coming from these addresses

114.119.161.23
114.119.163.92
114.119.166.158

what else can i do?
also where and how is he doing this?

Hi,

If you check with the tool www.ultratools.com/tools/ipWhoisLookup it indicates that these IP addresses are from huawei in Singapore.
Is you or someone else with access to the backend located there ?

Otherwise, I don't see how it could happen with an unpublished payment method as there is a check in the payment plugin for that.
But if you don't use PayPal Express, I would recommend to just disable the payment plugin via the Joomla plugins manager.
That way, you'll be sure it won't happen.