webhostau Posted May 31, 2011 Share Posted May 31, 2011 I just noticed someone viewing a ticket online without logging in... ummm.. the box was ticked in admin to say the client must login to view ticket... Private data was available to a non authorised internet user ... 0 Quote Link to comment Share on other sites More sharing options...
WHMCS Support Manager WHMCS John Posted May 31, 2011 WHMCS Support Manager Share Posted May 31, 2011 How do you know they hadn't logged in? Perhaps they have the cookie stored on their computer so has logged in earlier? But of course if the ticket does not belong to a client, ie. a non-registered user, then no login is required but that's why the ticket url contains both the ticket number and a unique key so it's not just anybody who can access that ticket - they have to be given the unique link for it. 0 Quote Link to comment Share on other sites More sharing options...
webhostau Posted May 31, 2011 Author Share Posted May 31, 2011 I didn't get a chance to ask them. Can I state after logging out of admin my brower (firefox) viewed the ticket. 0 Quote Link to comment Share on other sites More sharing options...
webhostau Posted May 31, 2011 Author Share Posted May 31, 2011 How does one confirm customers view there own ticket anyway? 0 Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.