Menu Content

Support

> Forums, FAQs & Paid Support
Welcome, Guest
Username Password: Remember me
Forgot your password? Forgot your username? Create an account
ARTIO Forums
Archive
VM Invoice
Customer Support

Download any invoice!
(1 viewing) (1) Guest
Support forum for customers who have purchased this product. Archive only, no new post can be added.

NOTE: This category has been locked. If you have purchased paid version, please, use our Support Ticket system instead. If you are using free edition, please see the Community Support section.
  • Page:
  • 1

TOPIC: Download any invoice!

Download any invoice! 13 years, 11 months ago #19177

Hello,

I just noticed a major problem.
When you want to download an invoice from your account, the URL is like:

www.domain.com/index.php?option=com_vmin...task=pdf&cid=XXX

Just replace the XXX value by another number and you can download the invoice of another customer!

Do you have a solution to this problem?

Regards
Steven
The topic has been locked.

Re: Download any invoice! 13 years, 11 months ago #19178

  • jaku
Hello,
there was protection against this implemented already.

Just tested it and works fine. You cannot view or download other user invoices.
However note that admins and superadmins can always access all invoices!
Last Edit: 13 years, 11 months ago by .
The topic has been locked.
  • Page:
  • 1
ARTIO Forums
Archive
VM Invoice
Customer Support
User Login Empty
Copyright © 2024 ARTIO