Uploaded image for project: 'OFBiz'
  1. OFBiz
  2. OFBIZ-6295

Shoppingcart checkout shipping rules can be hacked

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Open
    • Major
    • Resolution: Unresolved
    • Trunk, Upcoming Branch
    • None
    • order
    • None

    Description

      Logic should be added to prevent someone from changing the default values of the shopping cart checkout carrier shipping method radio option value to a shipping method that isn't shown due to rules being broken. I changed the radio option value using firebug but the order creation succeeded without any error about the shipping method rules being broken.

      Attachments

        Issue Links

          is depended upon by

          Improvement - An improvement or enhancement to an existing feature or task. OFBIZ-5400 Improve shopping cart to better handle a large number of ship groups and item associations

          • Major - Major loss of function.
          • Patch Available
          relates to

          Bug - A problem which impairs or prevents the functions of the product. OFBIZ-6296 updateOrderItemShipGroup allows updating to rule breaking shipment method without error

          • Major - Major loss of function.
          • Open

          Bug - A problem which impairs or prevents the functions of the product. OFBIZ-6297 orderview ship group drop down incorrectly lists rule breaking carrier shipment methods

          • Major - Major loss of function.
          • Open

          Activity

            People

              Unassigned Unassigned
              ofbizzer Christian Carlow
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated: