No admission to Documentation

Hi,

We looked at your website and found what blocks the Documentation page. Your site sends this header, on the frontend and on /administrator/ alike:

The Documentation page, and the update/about page, display a page of www.hikashop.com in an iframe. Your frame-src only allows your own website and PayPal, so the browser refuses to load that iframe and displays "This content is blocked. Contact the site owner to fix the issue.". That is also why it happens in every browser and in a private window: it comes from your own website, not from an extension and not from us. We checked our side too: our server sets no restriction on being framed, and that page loads normally in an iframe hosted on another domain.

So the fix is to add www.hikashop.com to the frame-src of that header:

Neither HikaShop nor Joomla itself sends that header, so it comes from Joomla's "System - HTTP Headers" plugin, from a security extension like Admin Tools, or from an .htaccess file or the configuration of your server. Whichever of those it is, that is where the line has to be changed. In the meantime, the same documentation is available directly on www.hikashop.com/support/documentation.html

Another point, which may or may not be related to your emails: the pages of your shop announce HikaShop Business 6.5.2, built on July 30, and not 6.6.0. So either the update did not go through, or the site you updated is another one. Could you check what the Joomla extensions manager says?

About the notification emails, the "Change status" action was indeed sending the email whether the "Send notification email" checkbox was ticked or not, but we corrected that in HikaShop 6.5.1, so both 6.5.2 and 6.6.0 should already have the correction. Could you check in the "Mass actions" menu whether you have another mass action set on the "After an order is updated" or "After an order is confirmed" trigger with a "Send email" action in it? Such an action sends its emails on its own, regardless of that checkbox. A screenshot of the action you are running would help us too, along with whether the email your customers receive is the order status notification email or a different one.

If you don't want a mass action to run when you change the status of an order, you should either unpublish it, or make sure it doesn't have a "trigger" configured.