creating infinite orders with total 0.00 - on checkout confimation

[HerrZ]

hi,

in case of abuse of this error, it is possible to flood the backend with infinite orders.

 

==configuration baseline==

+ General Settings / Ordering / Auto Redirect on Checkout: "Just show the order completed page (no payment redirect)"

+ !$loggedin

+ systpl=default

+ carttpl=default

 

==tracing back==

+ we are in cart.php

+ add hosting package

+ add domain for hosting package

...

+ now we are in cart.php?a=view

+ go to cart.php?a=checkout

+ for example fill in all required fields EXCEPT OF "security question"

(this works too, when leaving out any requried field except of "only leaving out accept Terms of Service")

+ click checkout (and get the errormessage)

+ now fill in the "security question" correctly (or the other requried fields which skipped previously)

+ now checkout

+ we are in the orderconfirmationpage (complete.tpl) - it looks fine

+ NOW press the browser "history back" or key backspace (you will get a browser $_POST resend question - click yes)

+ the bug is activated every time from now, you click refresh or F5 a new order (with total 0.00) is placed. look at the displayed order number in checkout confirmation. it changes every refresh.

 

the condition is to cause an req.-field error before checkout (except of terms of use thing).

try out.

[sparky]

I have not had the problem for quite some time now and have not noticed any other problems with this fix.

Add this to the top (first line) of viewcart.tpl

<script>{literal}if(window.history.forward(1) != null) window.history.forward(1);{/literal}</script>