1

We have a rule setup to give free shipping on orders over $49. We had a very suspicious order come through where the discount didn't make sense:

enter image description here

You can see in the screenshot the only coupon listed in savings is the "eligible for free shipping". Yet they got $150 listed here. If you look at the product rows they got a hefty discount for each item in the order.

This person paid with the standard magento paypal module.

Here's our Shopping Cart Price Rule config:

enter image description here

enter image description here enter image description here enter image description here enter image description here

So it it a misconfig or exploit?

Improve this question

1 Answer 1

Reset to default
0

The configuration looks right (i.e. it should only result in free shipping)

I cannot find anything related in the Magento 1 bug tracker, also not in the Magento 1.9.x release notes, so it does not look like a known issue or exploit.

This does not mean that there cannot be an unknown exploit, but I find it more likely that it's not a core issue, but a bug in an extension. So review your sales related extensions and make sure they are up to date.

If you can reproduce the order, try disabling extensions one by one until you found the one that causes this behavior.

Improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.