View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0005285 | OXID eShop (all versions) | 1.05. Users | public | 2013-07-11 14:42 | 2015-03-12 16:40 |
| Reporter | tomas.lygutas | Assigned To | |||
| Priority | normal | Severity | feature | Reproducibility | always |
| Status | closed | Resolution | suspended | ||
| Target Version | 4.9.0_5.2.0_RC1 | ||||
| Summary | 0005285: Shop should check if user owns email when user creates shop account | ||||
| Description | If you have a shop-side user account and use Paypal Express without being logged in (Email-Address in Shop matches Email-Address in Paypal) and select a different delivery address, you are greeted with Error-Message after being redirected back to shop. Message asks user to login and go through checkout again, it is related with possible security issues, as emails are note validated (confirmation mail should be sent). If email would be always validated, shop could trust shipping address from PayPal. | ||||
| Tags | No tags attached. | ||||
| Theme | All | ||||
| Browser | All | ||||
| PHP Version | any | ||||
| Database Version | any | ||||
| related to | 0004796 | resolved | tomas.lygutas | module PayPal | Transfer of shipping address from paypal to Shop only works when user is logged in |
| related to | 0005713 | resolved | saulius.stasiukaitis | OXID eShop (all versions) | New TLDs are not accepted by oxinputvalidator |
|
|
waiting for the PO decision. |
|
|
Why do you have to go through pp-Express checkout again? With pp-Express, user is sent to order overwiew from pp, why not ask for password when user is sent back to shop and then directly show order overview? Other possible solution: make guest orders with existing mail addresses possible. |
|
|
moved to backlog |
