[willbee]

A follow up on the status of the problem with View and Print tickets extension and Event Tickets Plus. The issue is not listed in known issues, has had no updates for 3 months and is still a problem in current versions.

It allows any logged in user to download a paid event ticket which has not been paid for.

• This reply was modified 8 years ago by willbee.

[willbee]

Thanks Andras

1. For clarity. The issue is with the Event Tickets Plus Extension: Show and Print Tickets. This is required to add pdfs, but the problem occurs whether or not pdfs are being used.

2. Re The original post is not closed yet – It does have a msg box …
   This thread hasn’t seen any activity for quite some time and we are not accepting further replies.
   If you need further help with this or any other issue, please create a new topic (you can of course include a link to this one if that helps to provide additional context) and one of the team will be only too happy to help.

I’m happy to update you wherever it makes sense to you, but I don’t see a way to do it from the original post.

Thanks for your help. As you said it is a security issue for us, but I think also for anyone else using the extension.

[willbee]

Thanks Victor

I think the piece that needs addressing is the code that displays the ‘View Your Tickets’ on the event page, which occurs whether or not PDF extension is installed. While it’s the attached pdf which is the real problem when
its for an order that has failed to complete, the root cause is in treating a failed order as one that ETPlus should display as one of “Your tickets”. Fix it at the source and the PDF extension won’t need touching.

[willbee]

This reply is private.

[Author]

Posts