View Issue Details

IDProjectCategoryView StatusLast Update
0007514OXID eShop (all versions)1.01. Products (product, categories, manufacturer, promotions etc.)public2023-08-22 12:04
ReporterSven Brunk 
PriorityhighSeveritycriticalReproducibilityalways
Status acknowledgedResolutionopen 
Product Version7.0.0 
Target VersionPatch for 7.0Fixed in Version 
Summary0007514: Shop frontend does not respect inactive state correctly on products, categories and manufacturers
DescriptionThe shop frontend shows different, but wrong behaviour for inactive objects at least for types product, category and manufacturer:

1. SEO URLs of manufacturers are always accessible, no matter if they are active or not
2. SEO URLs of products and categories can be extended with ?redirect=1 to cause incorrect behaviour
   a. products show a white page which probably means an error occurs
   b. categories can be tricked to just display normally this way

This can be critical for some shop owners.
Steps To Reproduce1. create a shop with demodata installed
2. deactivate 1 category
3. deactivate 1 product
4. collect SEO URLs for 1 inactive category, 1 inactive product and 1 inactive manufacturer (there should be some inactive in Demodata already)
5. call the SEO URL of the inactive manufacturer -> it is accessible
6. call the SEO URL for the inactive product -> redirect (correct!)
7. call the SEO URL for the inactive product with attached ?redirect=1 -> blank page (not good)
8. call the SEO URL for the inactive category -> redirect (correct!)
9. call the SEO URL for the inactive category with attached ?redirect=1 -> category normally visible (even worse)
TagsNo tags attached.
ThemeNot defined
BrowserNot defined
PHP VersionNot defined
Database VersionNot defined

Activities

There are no notes attached to this issue.