I've updated to EasyStore 1.2.1 - which apparently fixes a method for GUEST accounts to view their orders... Only it doesn't!
The Option is there on the confirmation page (see: https://prnt.sc/bRYw6XNXphLr), but the significant fxxx up is that this links to /shop/myorders which IMMEDIATELY redirects to the Joomla login screen!
How exactly is a GUEST meant to log in to Joomla????
Hello Stuart Clark
I have created a test order as a guest user. Here is the order view.
https://prnt.sc/fgAsKizxAN1l
It looks fine. Please check it again.
Best regards
This is ABSOLUTELY NOT FIXED
**YOU HAVE NOW ENGINEERED A PRIVACY ISSUE - ANYONE CAN FIND OUT PERSONALLY IDENTIFIABLE INFORMATION ABOUT ANY ORDER BY SIMPLY PHISHING ORDER IDs.
YOU NEED TO FIX THIS IMMEDIATELY
I got your point. I have talked to the team. They are working for a better solution that does not hamper privacy.
It shouldn't require a customer to point this out!
I'm SERIOUSLY loosing faith in JoomShaper's ability to deliver robust products!
??? There is a SERIOUS SECURITY FLAW in EasyStore at the moment, caused by JoomShaper's lax development.
RESOLVING THIS SHOULD BE YOUR FIRST PRIORITY
Yes, the team is working on it. I will update you when I get the fix.
