Forums / Setup & design / Shop module

Shop module

« 
Previous topic
|
Setup & design
|
Next topic
 »
Author Message

Lars Eirik R

Wednesday 17 March 2010 6:06:13 am

Hi we are working with a client and have set upt the webshop functionality locally.

I have some important questions which i would like you to answer.

One of the main problems we are facing is the fact that i may easily view other users orders.. If i am not logged in(anonymous) , i may still view all orders placed in the system by going to the url /shop/orderview/<number>

This has to be incorrect ?

Are there any smart solutions i should apply or is this related to accesscontrol?

Any help is greatly appreciated.

Jean-Luc Nguyen

Wednesday 17 March 2010 7:27:53 am

Hello,

Does you anonymous user have specific role ?

http://www.acidre.com

Lars Eirik R

Wednesday 17 March 2010 9:50:52 am

hm.. i guess assigning shop -> all functions is not the best for the shop module.. Will take a look at this later.

Thanks for getting back to me.

Lars Eirik R

Wednesday 17 March 2010 10:20:17 am

Hm. Only assigning the function buy does not help.

I have to add i have only tested this with accessing different orderview/<number> from the same computer.

But it seems strange that i can access another users orders.

Also.. i am not caching the website, all cache for templates and content is off.

Any ideas?

Lars Eirik R

Thursday 18 March 2010 12:08:30 pm

ignore this, as it seems the user was logged in..

eZ debug

Timing: Jan 18 2025 00:06:30
Script start
Timing: Jan 18 2025 00:06:30
Module start 'content'
Timing: Jan 18 2025 00:06:31
Module end 'content'
Timing: Jan 18 2025 00:06:31
Script end

Main resources:

Total runtime1.0252 sec
Peak memory usage4,096.0000 KB
Database Queries200

Timing points:

CheckpointStart (sec)Duration (sec)Memory at start (KB)Memory used (KB)
Script start 0.00000.0079 587.5781180.8516
Module start 'content' 0.00790.8949 768.4297563.7109
Module end 'content' 0.90280.1223 1,332.1406337.7109
Script end 1.0251  1,669.8516 

Time accumulators:

 Accumulator Duration (sec) Duration (%) Count Average (sec)
Ini load
Load cache0.00390.3839210.0002
Check MTime0.00160.1517210.0001
Mysql Total
Database connection0.00150.145810.0015
Mysqli_queries0.946792.34892000.0047
Looping result0.00220.21061980.0000
Template Total0.994097.020.4970
Template load0.00200.197920.0010
Template processing0.991996.754420.4959
Template load and register function0.00010.012710.0001
states
state_id_array0.00120.112310.0012
state_identifier_array0.00090.090020.0005
Override
Cache load0.00170.1643280.0001
Sytem overhead
Fetch class attribute can translate value0.00190.189430.0006
Fetch class attribute name0.00120.113770.0002
XML
Image XML parsing0.00110.108830.0004
class_abstraction
Instantiating content class attribute0.00000.0019100.0000
General
dbfile0.00220.2142330.0001
String conversion0.00000.000530.0000
Note: percentages do not add up to 100% because some accumulators overlap

CSS/JS files loaded with "ezjscPacker" during request:

CacheTypePacklevelSourceFiles
CSS0extension/community/design/community/stylesheets/ext/jquery.autocomplete.css
extension/community_design/design/suncana/stylesheets/scrollbars.css
extension/community_design/design/suncana/stylesheets/tabs.css
extension/community_design/design/suncana/stylesheets/roadmap.css
extension/community_design/design/suncana/stylesheets/content.css
extension/community_design/design/suncana/stylesheets/star-rating.css
extension/community_design/design/suncana/stylesheets/syntax_and_custom_tags.css
extension/community_design/design/suncana/stylesheets/buttons.css
extension/community_design/design/suncana/stylesheets/tweetbox.css
extension/community_design/design/suncana/stylesheets/jquery.fancybox-1.3.4.css
extension/bcsmoothgallery/design/standard/stylesheets/magnific-popup.css
extension/sevenx/design/simple/stylesheets/star_rating.css
extension/sevenx/design/simple/stylesheets/libs/fontawesome/css/all.min.css
extension/sevenx/design/simple/stylesheets/main.v02.css
extension/sevenx/design/simple/stylesheets/main.v02.res.css
JS0extension/ezjscore/design/standard/lib/yui/3.17.2/build/yui/yui-min.js
extension/ezjscore/design/standard/javascript/jquery-3.7.0.min.js
extension/community_design/design/suncana/javascript/jquery.ui.core.min.js
extension/community_design/design/suncana/javascript/jquery.ui.widget.min.js
extension/community_design/design/suncana/javascript/jquery.easing.1.3.js
extension/community_design/design/suncana/javascript/jquery.ui.tabs.js
extension/community_design/design/suncana/javascript/jquery.hoverIntent.min.js
extension/community_design/design/suncana/javascript/jquery.popmenu.js
extension/community_design/design/suncana/javascript/jScrollPane.js
extension/community_design/design/suncana/javascript/jquery.mousewheel.js
extension/community_design/design/suncana/javascript/jquery.cycle.all.js
extension/sevenx/design/simple/javascript/jquery.scrollTo.js
extension/community_design/design/suncana/javascript/jquery.cookie.js
extension/community_design/design/suncana/javascript/ezstarrating_jquery.js
extension/community_design/design/suncana/javascript/jquery.initboxes.js
extension/community_design/design/suncana/javascript/app.js
extension/community_design/design/suncana/javascript/twitterwidget.js
extension/community_design/design/suncana/javascript/community.js
extension/community_design/design/suncana/javascript/roadmap.js
extension/community_design/design/suncana/javascript/ez.js
extension/community_design/design/suncana/javascript/ezshareevents.js
extension/sevenx/design/simple/javascript/main.js

Templates used to render the page:

UsageRequested templateTemplateTemplate loadedEditOverride
1node/view/full.tplfull/forum_topic.tplextension/sevenx/design/simple/override/templates/full/forum_topic.tplEdit templateOverride template
5content/datatype/view/ezimage.tpl<No override>extension/sevenx/design/simple/templates/content/datatype/view/ezimage.tplEdit templateOverride template
5content/datatype/view/ezxmltext.tpl<No override>extension/community_design/design/suncana/templates/content/datatype/view/ezxmltext.tplEdit templateOverride template
5content/datatype/view/ezxmltags/paragraph.tpl<No override>extension/ezwebin/design/ezwebin/templates/content/datatype/view/ezxmltags/paragraph.tplEdit templateOverride template
1pagelayout.tpl<No override>extension/sevenx/design/simple/templates/pagelayout.tplEdit templateOverride template
 Number of times templates used: 17
 Number of unique templates used: 5

Time used to render debug report: 0.0001 secs