Visitors can save and edit wishlists

likandev
Topic Author
Offline

14 years 1 week ago #73527 by likandev

Visitors can save and edit wishlists was created by likandev

Hi,

I noticed that visitors are able to add, save, list and edit wishlists.

The problem I see is that visitors are seeing a list of all wishlists made by all visitors and modify, even delete them.

I'm able to see the same list from 2 different computers at the same time..

Is this a bug ( I'm trying to get it prevented from the showcart and showcarts tmpl overrides, or is this an expected behavior?

If this is an expected behavior, what is the reason?

Eduardo Chongkan - Likan Development
likandevelopment.com

Please Log in or Create an account to join the conversation.

likandev
Topic Author
Offline

14 years 1 week ago - 14 years 1 week ago #73531 by likandev

Replied by likandev on topic Re: Visitors can save and edit wishlists

Update:

I added the following code to the showcarts tmpl override on line 10.

Code:

$user = JFactory::getUser();
if ($user -> guest) {
	$app = &JFactory::getApplication();
	$app -> enqueueMessage(JText::_('PLEASE_LOGIN_FIRST'));
	global $Itemid;
	$url = '';
	if (!empty($Itemid)) {
		$url = '&Itemid=' . $Itemid;
	}
	if (version_compare(JVERSION, '1.6', '<')) {
		$url = 'index.php?option=com_user&view=login' . $url;
	} else {
		$url = 'index.php?option=com_users&view=login' . $url;
	}
	$app -> redirect(JRoute::_($url . '&return=' . urlencode(base64_encode(hikashop_currentUrl())), false));
	return false;
}

Eduardo Chongkan - Likan Development
likandevelopment.com

Last edit: 14 years 1 week ago by likandev.

Please Log in or Create an account to join the conversation.

Jerome
Offline
HikaShop core developer

14 years 1 week ago #73597 by Jerome

Replied by Jerome on topic Re: Visitors can save and edit wishlists

Hi,

Thanks for the report.
I have already see this bug in our bug tracker and I am quite sure that the it is fixed in HikaShop 2.0
We would verify it, for more security

Regards,

Jerome - Obsidev.com
HikaMarket & HikaSerial developer / HikaShop core dev team.

Please Log in or Create an account to join the conversation.

likandev
Topic Author
Offline

14 years 1 week ago #73651 by likandev

Replied by likandev on topic Re: Visitors can save and edit wishlists

Hi, you are welcome. Do you know if by any chance there is a bug when adding items to a new wishlist?

I create a new wishlist, but every product I add goes to the 1 list I have, I never get to have more than 1.

Eduardo Chongkan - Likan Development
likandevelopment.com

Please Log in or Create an account to join the conversation.

Time to create page: 0.057 seconds