3

I just found a weird thing in checkout (Magento 1.9.2.3) If customer have two pages opened, one is a checkout page and another one is a product page and customer will proceed with checkout but in the meantime go back to the product page it can affect order content if customer add another item to the basket but in checkout this change will not be applied (but order in will) so after the payment is done customer will pay for example only for one item while on order there will be more.There should be a order validation before the form is submitted to the payment gateway. Did anyone met this or similar problem before ?

Update:

In the meantime We've checked it on other Magento installations and it seems like a serious issue. Of course if the shop owner is not checking all of the orders and it's content and prices. We tested it on three different Magento instances and everyone was doing the same, once you fill up the form and select delivery and payment method go to the second page where you can select and add another item to the basket, then go back to the checkout and click "Place the order" then add another item quickly to the basket. Magento will save order with new content but payment will be recorded with only one.

Coincidence ??? Or is this the problem with Magento 1.9.2.3 ??

  • more info with pics need. – padhiyar gaurang Oct 26 '17 at 10:28
  • need some time to prepare (don't want there any details so somebody can exploit my shop :)) – Rob D. A. Oct 26 '17 at 10:33
  • yaa i understand that. Is this happen only with extrenal payment method only? like paypa etc.. or with COD also? – padhiyar gaurang Oct 26 '17 at 10:36
  • Not using COD, paypal and sagepay only. But it does not matter what payment method. Once you fill up the form, select payment and shipping, then open separate page and add something to the basket checkout is not verifying basket content while submitting form. That's why customer pay only for one item but in backend order contains other items as well. – Rob D. A. Oct 26 '17 at 10:40
  • it seems like it is not a problem with OSC, it's a Magento issue and payment gateway. – Rob D. A. Oct 26 '17 at 14:24
0

Guys sorry for the alarm but it was something what I never expected. Apparently my predecessors who configured everything missed some settings in SagePay.

So to make sure everything will work properly and there will be no possibility to update order right before or after payment is processed check in SagePay settings this two options:

  1. 'validate quote',
  2. 'Check if amounts match'.

This options "on" should help a lot and check if there was anything changed in order content before processing payment regardless on how many tabs/pages customer was buying items.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.