View Issue Details

Jump to Notes
IDProjectCategoryView StatusDate SubmittedLast Update
0004460OXID eShop (all versions)1.05. Userspublic2012-08-27 15:432012-11-22 13:03
ReporterWBL_BjoernLange Assigned To 
PriorityhighSeverityminorReproducibilityalways
Status resolvedResolutionfixed 
Product VersionPast development 
Fixed in Version4.8.0_5.1.0_beta1 
Summary0004460: Missing Double Opt-In in account_newsletter
DescriptionThe Account-Section needs Double Opt-In aswell, without it, a "bad user" can register himself in the shop without using the newsletter ... and enable the newsletter for another person in the account_newsletter-View after the registration.
TagsNo tags attached.
ThemeBoth
BrowserAll
PHP Versionany
Database Versionany

Activities

jurate.baseviciene

2012-08-29 09:37

reporter   ~0007402

Reminder sent to: WBL_BjoernLange

Hi,

Actually we cannot reproduce this case nor on 4.6.4, neither on 5.0.0 eshop version.
Could you please let us know if you still experience same problem on our latest eShop version 4.6 or demoshop:
http://demoshop.oxid-esales.com/enterprise-edition/ [^]
http://demoshop.oxid-esales.com/professional-edition/ [^]
http://demoshop.oxid-esales.com/community-edition/ [^] ?
Maybe some other special options are turned on? Please

Best regards,

WBL_BjoernLange

2012-08-29 10:08

reporter   ~0007405

Last edited: 2012-08-29 10:09

 Did you really tested it?

There is simply no Double Opt-In in the account_newsletter-View (taken from CE 4.7b1)

public function subscribe()
    {
        // is logged in ?
        $oUser = $this->getUser();
        if ( !$oUser ) {
            return false;
        }
        
        $oSubscription = $oUser->getNewsSubscription();
        $iStatus = oxConfig::getParameter( 'status' );
        
        if ( $iStatus == 0 && $iStatus !== null ) {
            $oUser->removeFromGroup( 'oxidnewsletter' );
            $oSubscription->setOptInStatus( 0 );
            $this->_iSubscriptionStatus = -1;
        } if ( $iStatus == 1 ) {
            // assign user to newsletter group
            $oUser->addToGroup( 'oxidnewsletter' );
            $oSubscription->setOptInEmailStatus( 0 );
            $oSubscription->setOptInStatus( 1 );
            $this->_iSubscriptionStatus = 1;
        }
    }

ray

2012-09-03 22:53

reporter   ~0007421

Last edited: 2012-09-03 22:53

 You mean - if someone registers without choosing "Newsletter", then goes to account -> newsletter and chooses "yes" in dropdown?

Right, you will not get any eMail when opt-in or opt-out via dropdown. Double-opt-in must be integrated there as well!

WBL_BjoernLange

2012-09-07 13:53

reporter   ~0007440

righto.

aurimas.gladutis

2012-11-22 13:03

reporter   ~0007951

Hi, when user in newsletter settings changes from "No" to "Yes", confirmation email will be send.