dailce Posted June 25, 2008 Share Posted June 25, 2008 Grab_Order_Details A customer can enter their email and order number on your site and view the order details without logging in. I think this will work well if you have PWA or No Account installed. Enjoy :) Hope I didn't make any errors in this guide. Feel free to improve this if you can - thanks. ================================ I will try my best to help out with this contribution, but I hope the community can help out more. I'm no expert in php, well at least I don't think I am :blush: Quote Link to comment Share on other sites More sharing options...
Guest Posted June 25, 2008 Share Posted June 25, 2008 This seems like a good idea but surely there is someway it could be abused??? Maybe I am just talking rubbish but I just have an awfull feeling that something could go wrong because this is the type of personal data that is locked away behind a login routine for a purpose. Maybe others could also share their points of view on this. Quote Link to comment Share on other sites More sharing options...
dailce Posted June 25, 2008 Author Share Posted June 25, 2008 (edited) Good point, but I don't think it can get abused. I've seen this done before on some big sites. You will need 2 pieces of information to view an order's details: order number and email. Without that you will not get any information. I'm sure you can guess the order number if you wanted to go through consecutive numbers, but you will still need to know the email. One way to make it a bit secure would probably be to make your order number more complex like adding random letters to it i.e. 1353ADS5486X Maybe there is a way to make it more secure, but I think it's ok. If anyone does have some insight then please share. Edited June 25, 2008 by dailce Quote Link to comment Share on other sites More sharing options...
Snoboreders Posted July 10, 2008 Share Posted July 10, 2008 I was just about to install this contribution until I realized that you're right....there is a chance it could be abused. In my store, the last order number was 93. It doesn't take too much creativity to figure out what the rest of the numbers were. Now all that's needed are some email addresses. Is there a way to add something to this contrib to make the order number more complex? For example, I was looking at an order I placed with a company, and my order number was this: R4167123. Compare that to 93. I think if the order number was more randomized that would put people more at ease. Quote Link to comment Share on other sites More sharing options...
Guest Posted July 10, 2008 Share Posted July 10, 2008 I was just about to install this contribution until I realized that you're right....there is a chance it could be abused. In my store, the last order number was 93. It doesn't take too much creativity to figure out what the rest of the numbers were. Now all that's needed are some email addresses. Is there a way to add something to this contrib to make the order number more complex? For example, I was looking at an order I placed with a company, and my order number was this: R4167123. Compare that to 93. I think if the order number was more randomized that would put people more at ease. The email address still has to be guessed. You can step the last order up in phpmyadmin to make it a higher number. Quote Link to comment Share on other sites More sharing options...
danta67 Posted October 12, 2008 Share Posted October 12, 2008 Hi there Installed this contri but do we need ssl for this to work i made a link in the order email so the customer can click the link from there email but when i fill in the email adres and the order number it says order nr not exist in our data base what am i doing wrong danta67 Quote Link to comment Share on other sites More sharing options...
danta67 Posted October 13, 2008 Share Posted October 13, 2008 i just dont understand step 7 in the read me files help please i realy like this contri but it is not working for me danta67 Quote Link to comment Share on other sites More sharing options...
JSR Posted March 28, 2009 Share Posted March 28, 2009 Does this contribution actually work? :blink: I've installed the two last versions by now and nothing gives.... Quote Link to comment Share on other sites More sharing options...
JSR Posted March 30, 2009 Share Posted March 30, 2009 When I use a non existing order id or email it does show the error warnings, however the page just keeps refreshing itself with each valid request.... Anyone using this contribution? I really like it a lot, but it's just not working the way it's supposed to... Quote Link to comment Share on other sites More sharing options...
Guest Posted August 5, 2009 Share Posted August 5, 2009 This doesn't work! It is missing coding to show it on the main page or account page. Quote Link to comment Share on other sites More sharing options...
deanfromoz Posted January 1, 2010 Share Posted January 1, 2010 @Dalice Firstly great contribution. Have installed but it seems it won't work with PWA as it pulls data from CUSTOMERS table thus it won't identify any orders that have PWA. Hopefully there is an easy solution to this problem..... Quote Link to comment Share on other sites More sharing options...
nevergiveup Posted June 19, 2010 Share Posted June 19, 2010 I can't get Grab Order Details contrib to work. I have tried everything. Looks like it needs to be updated. Hope someone will work on a new update. People that have installed PWA and/or No Account contribution really need this to work so the customer can look up order status without Account. Quote Link to comment Share on other sites More sharing options...
wantthatone Posted November 16, 2010 Share Posted November 16, 2010 Hi This has been quiet for some time, but I needed this contrib for my site with No Account installed, so I modded it to work for me. Have uploaded a complete updated contrib form the link at the top, for use with No Account. I hope it helps someone! Quote Link to comment Share on other sites More sharing options...
ardee00 Posted February 21, 2011 Share Posted February 21, 2011 Can somebody confirm? To use this, one must also add a menu item (or other navigation) that takes the user to a new page (also needs to be created) where the user can input the order number and e-mail address ... which THEN invokes this new code? I.e., this contribution is one piece of what you need. You also need navigation and a new screen (form). Right? Thanks! Quote Link to comment Share on other sites More sharing options...
New 
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.