cooch

Did you ever get this fixed?

Can't get wishlist.php to work because POST.prod_link and REQUEST.prod_link are being detected as xss attacks: Affected tags: xss csrf Affected parameters: REQUEST.prod_link.0=http%3A%2F%2Fwww.domain.com%2Fstore%2Fproduct_info.php%3Fproducts_id%3D367%7B1%7D2, POST.prod_link.0=http%3A%2F%2Fwww.domain.com%2Fstore%2Fproduct_info.php%3Fproducts_id%3D367%7B1%7D2, Request URI: /store/wishlist.php I added REQUEST.prod_link and POST.prod_link to the exclusion list with no luck. If I have a number of items on wishlist, the total impact bans me...Any ideas?

Will do! Thanks.

Sorry to sound stupid, but you suggested: "There is a mod (to use on top of QPBPP) in the latest version of Quantity Price Break Per Products..." I have that module, and I can't see how to use it to do what I need. I don't want to give price breaks, and I don't want to enforce certain quantities to be purchased to get a break. However, I am thinking I might me able to modify the global quantity module to select only certain products, and base the discount off of that quantity instead of the total cart quantity. Thanks.

Would you happen to know which mod? I know there is a module that provides a discount depending on how many total items there are in the cart. What I think I need is a similar module, but one that only looks at certain items in the cart, not the total quantity. Will the mod you are thinking of do this?

I'll check that out, thanks!

Could use some creative input! We have certain products that have common model numbers (like DVD_1, DVD_2, etc) that we would like to offer a "buy any 3" discount for. We would like to set up a way that placing any combination of 3 of these products into the cart results in a designated discount on them only (nothing else in the cart). We are thinking we could key off the model number, somehow. Here are some caveats: 1) Because of the way the products are set up, they are not in the same category, but are spread across several. 2) If they place 1 or 2 in their cart, get no discount 3) If they place 3 in their cart, get a % discount on each 4) If they place 4 in their cart, get a % discount on only 3 5) If they place 5 in their cart, get a % discount on only 3 6) If they place 6 in their cart, get a % discount on each Anyone have any ideas on how to work this? Thanks

Gotta be honest: I have no clue. However, something must have changed. The last time things like this happened to me, it was due to un-announced server upgrades, like an upgrade to php5, mysql5, etc. The host thought they would be benign changes, but they weren't. Worth asking?

Does anyone know if there is any online print-on-demand company that offers some kind of interface that osc can connect to? We'd love to be able to: 1) have a buyer purchase a book, 2) send their order and shipping info to an online print-on-demand company, 3) have that company process the order and ship the book, 4) then have that company bill our account. A module should allow us to set a price in the cart to bill the buyer, which would be independent of the price the printer charges us. Sound like anything anyone has seen or might be working on?

The current module only shows the cart contents of one visitor at a time. You also have to click on it to see it. I've been trying to re-write it so that each visitor's cart shows all the time, but am having some trouble. For some reason, it grabs the first cart contents it finds, then repeats it for each visitor. Has anyone some clue how to do it right? thanks!

There is a contribution that allows you to edit just about everything (http://www.oscommerce.com/community/contributions,1435). I don't think you can actually redeem a coupon, but I think you can manually add a discount. cooch

There are many discount-type contributions that show discounts at checkout. However, when using one that depends on the order total or the order quantity, customers have complained that they can't see the discount without having to bounce to checkout, back to products, back to checkout....etc. As a general question, can anyone offer the basic steps one would have to follow to copy the checkout "discount calculation" functions to the cart and/or the cart infobox? Thanks for any guidance. cooch

I have had several occasions where an order placed by one customer gets recorded into the database using another customer's info. Recently, a customer paid using Paypal (which was successfully recorded into the "paypal" table), but the actual order was logged in the "orders" table under a different customer and the order email was sent to this wrong customer. Anyone know how this could happen? Cookies? Sessions? Thanks!

Nevermind. Found out where to edit a few lines down.

I have a cart using an older version of PayPal IPN (v 1.1 2005/04/28 05:46:55 srashinkar), and it uses checkout_process.inc.php, not paypal_ipn.php . Before I attempt to remove it and replace it with a newer version, is there a way to modify it to handle the mods that now go in paypal_ipn.php? I think the lines in question are: if (DOWNLOAD_ENABLED == 'true') { $attributes_query = "select popt.products_options_name, poval.products_options_values_name, pa.options_values_price, pa.price_prefix, pad.products_attributes_maxdays, pad.products_attributes_maxcount , pad.products_attributes_filename from " . TABLE_PRODUCTS_OPTIONS . " popt, " . TABLE_PRODUCTS_OPTIONS_VALUES . " poval, " . TABLE_PRODUCTS_ATTRIBUTES . " pa left join " . TABLE_PRODUCTS_ATTRIBUTES_DOWNLOAD . " pad on pa.products_attributes_id=pad.products_attributes_id where pa.products_id = '" . $order->products[$i]['id'] . "' and pa.options_id = '" . $order->products[$i]['attributes'][$j]['option_id'] . "' and pa.options_id = popt.products_options_id and pa.options_values_id = '" . $order->products[$i]['attributes'][$j]['value_id'] . "' and pa.options_values_id = poval.products_options_values_id and popt.language_id = '" . $languages_id . "' and poval.language_id = '" . $languages_id . "'"; $attributes = tep_db_query($attributes_query); } else { $attributes = tep_db_query("select popt.products_options_name, poval.products_options_values_name, pa.options_values_price, pa.price_prefix from " . TABLE_PRODUCTS_OPTIONS . " popt, " . TABLE_PRODUCTS_OPTIONS_VALUES . " poval, " . TABLE_PRODUCTS_ATTRIBUTES . " pa where pa.products_id = '" . $order->products[$i]['id'] . "' and pa.options_id = '" . $order->products[$i]['attributes'][$j]['option_id'] . "' and pa.options_id = popt.products_options_id and pa.options_values_id = '" . $order->products[$i]['attributes'][$j]['value_id'] . "' and pa.options_values_id = poval.products_options_values_id and popt.language_id = '" . $languages_id . "' and poval.language_id = '" . $languages_id . "'"); } $attributes_values = tep_db_fetch_array($attributes); $sql_data_array = array('orders_id' => (int)$this->orders_id, 'orders_products_id' => $order_products_id, 'products_options_id' => $order->products[$i]['attributes'][$j]['option_id'], 'products_options' => $attributes_values['products_options_name'], 'products_options_values_id' => $order->products[$i]['attributes'][$j]['value_id'], 'products_options_values' => $attributes_values['products_options_values_name'], 'options_values_price' => $attributes_values['options_values_price'], 'price_prefix' => $attributes_values['price_prefix']); tep_db_perform(TABLE_ORDERS_PRODUCTS_ATTRIBUTES, $sql_data_array); } } } Thanks for a great contribution! cooch