{"id":1332448,"date":"2017-08-08T14:11:53","date_gmt":"2017-08-08T21:11:53","guid":{"rendered":"https:\/\/theeventscalendar.com\/support\/forums\/topic\/massive-security-hole-a-deleted-and-refunded-ticket-can-still-be-checked-in\/"},"modified":"2017-08-09T10:57:21","modified_gmt":"2017-08-09T17:57:21","slug":"massive-security-hole-a-deleted-and-refunded-ticket-can-still-be-checked-in","status":"closed","type":"topic","link":"https:\/\/theeventscalendar.com\/support\/forums\/topic\/massive-security-hole-a-deleted-and-refunded-ticket-can-still-be-checked-in\/","title":{"rendered":"-MASSIVE SECURITY HOLE- A deleted AND refunded ticket can STILL be checked in!"},"content":{"rendered":"<p>I&#8217;m attempting to continue a <a href=\"https:\/\/theeventscalendar.com\/support\/forums\/topic\/a-deleted-ticket-can-still-be-checked-in\/\">closed thread<\/a> about being able to still check in a ticket after it has been deleted.<\/p>\n<p>We&#8217;re dealing with the same issue and are alarmed to see that since it was raised several months ago it hasn&#8217;t been fixed.<\/p>\n<p>The situation we have is that a single order of a WooCommerce product containing multiple tickets for different events had to be refunded. On the WooCommerce side that was done the usual way. However, on the Event Tickets Plus side, even though the Attendee report for the ticket says &#8220;Refunded&#8221;, and there is no Check In button to click (only a View Order button, as one would expect), when I use a QR code reader to attempt a check in, <strong>it does allow check in for the refunded ticket, as if no refund had occurred.<\/strong> This is bad.<\/p>\n<p>Furthermore, when I undo that check in and then delete the ticket, and then use the QR code again, <strong>it allows the check in as if the ticket hadn&#8217;t been deleted!<\/strong> This is also bad.<\/p>\n<p>There needs to be a stronger linkage between what happens in WooCommerce to an order with multiple ticketed events purchased and what happens to a ticket attached to that order. If an order is refunded, canceled, or otherwise not valid, the associated event ticket for the attendee should also be <em>turned completely off and invalidated<\/em>, as far as checking in is concerned, with the message at check in being &#8220;The ticket with ID XXXX was voided due to being refunded (or canceled or deleted or whatever) and is no longer valid.&#8221;<\/p>\n<p><strong>We would request a <em>speedy<\/em> resolution to this issue as our event is happening on August 21st, 2017<\/strong> and we&#8217;d like the peace of mind of knowing that our QR code check in process is airtight. While we don&#8217;t expect fraud with this particular crowd, we also don&#8217;t want any unpleasant surprises in case someone does try to get away with something. I&#8217;m sure your other customers would appreciate a fix as well.<\/p>\n","protected":false},"template":"","class_list":["post-1332448","topic","type-topic","status-closed","hentry"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v25.2 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>-MASSIVE SECURITY HOLE- A deleted AND refunded ticket can STILL be checked in! -<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/theeventscalendar.com\/support\/forums\/topic\/massive-security-hole-a-deleted-and-refunded-ticket-can-still-be-checked-in\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"-MASSIVE SECURITY HOLE- A deleted AND refunded ticket can STILL be checked in! -\" \/>\n<meta property=\"og:description\" content=\"I&#8217;m attempting to continue a closed thread about being able to still check in a ticket after it has been deleted. We&#8217;re dealing with the same issue and are alarmed to see that since it was raised several months ago it hasn&#8217;t been fixed. The situation we have is that a single order of a [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/theeventscalendar.com\/support\/forums\/topic\/massive-security-hole-a-deleted-and-refunded-ticket-can-still-be-checked-in\/\" \/>\n<meta property=\"article:modified_time\" content=\"2017-08-09T17:57:21+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/theeventscalendar.com\/support\/forums\/topic\/massive-security-hole-a-deleted-and-refunded-ticket-can-still-be-checked-in\/\",\"url\":\"https:\/\/theeventscalendar.com\/support\/forums\/topic\/massive-security-hole-a-deleted-and-refunded-ticket-can-still-be-checked-in\/\",\"name\":\"-MASSIVE SECURITY HOLE- A deleted AND refunded ticket can STILL be checked in! -\",\"isPartOf\":{\"@id\":\"https:\/\/theeventscalendar.com\/support\/#website\"},\"datePublished\":\"2017-08-08T21:11:53+00:00\",\"dateModified\":\"2017-08-09T17:57:21+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/theeventscalendar.com\/support\/forums\/topic\/massive-security-hole-a-deleted-and-refunded-ticket-can-still-be-checked-in\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/theeventscalendar.com\/support\/forums\/topic\/massive-security-hole-a-deleted-and-refunded-ticket-can-still-be-checked-in\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/theeventscalendar.com\/support\/forums\/topic\/massive-security-hole-a-deleted-and-refunded-ticket-can-still-be-checked-in\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/theeventscalendar.com\/support\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Topics\",\"item\":\"https:\/\/theeventscalendar.com\/support\/topics\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Ticket Products\",\"item\":\"https:\/\/theeventscalendar.com\/support\/forums\/forum\/event-tickets\/\"},{\"@type\":\"ListItem\",\"position\":4,\"name\":\"Event Tickets Plus\",\"item\":\"https:\/\/theeventscalendar.com\/support\/forums\/forum\/event-tickets\/event-tickets-plus\/\"},{\"@type\":\"ListItem\",\"position\":5,\"name\":\"-MASSIVE SECURITY HOLE- A deleted AND refunded ticket can STILL be checked in!\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/theeventscalendar.com\/support\/#website\",\"url\":\"https:\/\/theeventscalendar.com\/support\/\",\"name\":\"\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/theeventscalendar.com\/support\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"-MASSIVE SECURITY HOLE- A deleted AND refunded ticket can STILL be checked in! -","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/theeventscalendar.com\/support\/forums\/topic\/massive-security-hole-a-deleted-and-refunded-ticket-can-still-be-checked-in\/","og_locale":"en_US","og_type":"article","og_title":"-MASSIVE SECURITY HOLE- A deleted AND refunded ticket can STILL be checked in! -","og_description":"I&#8217;m attempting to continue a closed thread about being able to still check in a ticket after it has been deleted. We&#8217;re dealing with the same issue and are alarmed to see that since it was raised several months ago it hasn&#8217;t been fixed. The situation we have is that a single order of a [&hellip;]","og_url":"https:\/\/theeventscalendar.com\/support\/forums\/topic\/massive-security-hole-a-deleted-and-refunded-ticket-can-still-be-checked-in\/","article_modified_time":"2017-08-09T17:57:21+00:00","twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/theeventscalendar.com\/support\/forums\/topic\/massive-security-hole-a-deleted-and-refunded-ticket-can-still-be-checked-in\/","url":"https:\/\/theeventscalendar.com\/support\/forums\/topic\/massive-security-hole-a-deleted-and-refunded-ticket-can-still-be-checked-in\/","name":"-MASSIVE SECURITY HOLE- A deleted AND refunded ticket can STILL be checked in! -","isPartOf":{"@id":"https:\/\/theeventscalendar.com\/support\/#website"},"datePublished":"2017-08-08T21:11:53+00:00","dateModified":"2017-08-09T17:57:21+00:00","breadcrumb":{"@id":"https:\/\/theeventscalendar.com\/support\/forums\/topic\/massive-security-hole-a-deleted-and-refunded-ticket-can-still-be-checked-in\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/theeventscalendar.com\/support\/forums\/topic\/massive-security-hole-a-deleted-and-refunded-ticket-can-still-be-checked-in\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/theeventscalendar.com\/support\/forums\/topic\/massive-security-hole-a-deleted-and-refunded-ticket-can-still-be-checked-in\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/theeventscalendar.com\/support\/"},{"@type":"ListItem","position":2,"name":"Topics","item":"https:\/\/theeventscalendar.com\/support\/topics\/"},{"@type":"ListItem","position":3,"name":"Ticket Products","item":"https:\/\/theeventscalendar.com\/support\/forums\/forum\/event-tickets\/"},{"@type":"ListItem","position":4,"name":"Event Tickets Plus","item":"https:\/\/theeventscalendar.com\/support\/forums\/forum\/event-tickets\/event-tickets-plus\/"},{"@type":"ListItem","position":5,"name":"-MASSIVE SECURITY HOLE- A deleted AND refunded ticket can STILL be checked in!"}]},{"@type":"WebSite","@id":"https:\/\/theeventscalendar.com\/support\/#website","url":"https:\/\/theeventscalendar.com\/support\/","name":"","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/theeventscalendar.com\/support\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"}]}},"_links":{"self":[{"href":"https:\/\/theeventscalendar.com\/support\/wp-json\/wp\/v2\/topic\/1332448","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/theeventscalendar.com\/support\/wp-json\/wp\/v2\/topic"}],"about":[{"href":"https:\/\/theeventscalendar.com\/support\/wp-json\/wp\/v2\/types\/topic"}],"version-history":[{"count":1,"href":"https:\/\/theeventscalendar.com\/support\/wp-json\/wp\/v2\/topic\/1332448\/revisions"}],"predecessor-version":[{"id":1333001,"href":"https:\/\/theeventscalendar.com\/support\/wp-json\/wp\/v2\/topic\/1332448\/revisions\/1333001"}],"wp:attachment":[{"href":"https:\/\/theeventscalendar.com\/support\/wp-json\/wp\/v2\/media?parent=1332448"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}