Orders - Confirm Order - How to hide/shuffle/encode order_id?

Have a question or a suggestion about a 3rd party addon module or plugin?
Let us know here.
Post Reply
tyu
New Member
New Member
Posts: 7
Joined: Mon Aug 24, 2009 11:07 am

Orders - Confirm Order - How to hide/shuffle/encode order_id?

Post by tyu »

Hi, guys!

I had a thought - it is easy to obtain overall orders quantity when someone tries to make an order and then see an URL like this:

http://bla.com/index.php?mact=Orders,cn ... 1order_id=22

You can see -  since the e-shop started working, it had 21 orders. It doesn't mean all of them are completed and paid. Anyway - as for me - I don't want to show my shop's orders quantity for everyone  ;D

Well.. now I cannot say anything about spoofing possibilities of order_id in this module. But. Don't you think it's necessary somehow to 'encode' order_id variable before displaying it to a front-end user?

Anybody have an idea?
Last edited by tyu on Sun Mar 28, 2010 2:43 pm, edited 1 time in total.
Post Reply

Return to “Modules/Add-Ons”