{"id":46283,"date":"2013-04-19T00:55:37","date_gmt":"2013-04-19T07:55:37","guid":{"rendered":"http:\/\/tri.be\/support\/forums\/topic\/wootickets-allows-users-to-purchase-tixs-without-the-password-for-private-events\/"},"modified":"2013-04-19T00:55:37","modified_gmt":"2013-04-19T07:55:37","slug":"wootickets-allows-users-to-purchase-tixs-without-the-password-for-private-events","status":"closed","type":"topic","link":"https:\/\/theeventscalendar.com\/support\/forums\/topic\/wootickets-allows-users-to-purchase-tixs-without-the-password-for-private-events\/","title":{"rendered":"Wootickets allows users to purchase tixs without the password for Private Events"},"content":{"rendered":"<p>I found a flaw in your ticketing.  When an event is set to private, the ticketing form shows up below the password fold, thus allowing users to purchase tickets without having the private event&#8217;s password. This is a major security flaw for private events, as it would allow unauthorized users to purchase tickets and skip the password authorization.<\/p>\n","protected":false},"template":"","class_list":["post-46283","topic","type-topic","status-closed","hentry"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v25.2 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Wootickets allows users to purchase tixs without the password for Private Events -<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/theeventscalendar.com\/support\/forums\/topic\/wootickets-allows-users-to-purchase-tixs-without-the-password-for-private-events\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Wootickets allows users to purchase tixs without the password for Private Events -\" \/>\n<meta property=\"og:description\" content=\"I found a flaw in your ticketing. When an event is set to private, the ticketing form shows up below the password fold, thus allowing users to purchase tickets without having the private event&#8217;s password. This is a major security flaw for private events, as it would allow unauthorized users to purchase tickets and skip [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/theeventscalendar.com\/support\/forums\/topic\/wootickets-allows-users-to-purchase-tixs-without-the-password-for-private-events\/\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/theeventscalendar.com\/support\/forums\/topic\/wootickets-allows-users-to-purchase-tixs-without-the-password-for-private-events\/\",\"url\":\"https:\/\/theeventscalendar.com\/support\/forums\/topic\/wootickets-allows-users-to-purchase-tixs-without-the-password-for-private-events\/\",\"name\":\"Wootickets allows users to purchase tixs without the password for Private Events -\",\"isPartOf\":{\"@id\":\"https:\/\/theeventscalendar.com\/support\/#website\"},\"datePublished\":\"2013-04-19T07:55:37+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/theeventscalendar.com\/support\/forums\/topic\/wootickets-allows-users-to-purchase-tixs-without-the-password-for-private-events\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/theeventscalendar.com\/support\/forums\/topic\/wootickets-allows-users-to-purchase-tixs-without-the-password-for-private-events\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/theeventscalendar.com\/support\/forums\/topic\/wootickets-allows-users-to-purchase-tixs-without-the-password-for-private-events\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/theeventscalendar.com\/support\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Topics\",\"item\":\"https:\/\/theeventscalendar.com\/support\/topics\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Ticket Products\",\"item\":\"https:\/\/theeventscalendar.com\/support\/forums\/forum\/event-tickets\/\"},{\"@type\":\"ListItem\",\"position\":4,\"name\":\"Event Tickets Plus\",\"item\":\"https:\/\/theeventscalendar.com\/support\/forums\/forum\/event-tickets\/event-tickets-plus\/\"},{\"@type\":\"ListItem\",\"position\":5,\"name\":\"Wootickets allows users to purchase tixs without the password for Private Events\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/theeventscalendar.com\/support\/#website\",\"url\":\"https:\/\/theeventscalendar.com\/support\/\",\"name\":\"\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/theeventscalendar.com\/support\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Wootickets allows users to purchase tixs without the password for Private Events -","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/theeventscalendar.com\/support\/forums\/topic\/wootickets-allows-users-to-purchase-tixs-without-the-password-for-private-events\/","og_locale":"en_US","og_type":"article","og_title":"Wootickets allows users to purchase tixs without the password for Private Events -","og_description":"I found a flaw in your ticketing. When an event is set to private, the ticketing form shows up below the password fold, thus allowing users to purchase tickets without having the private event&#8217;s password. This is a major security flaw for private events, as it would allow unauthorized users to purchase tickets and skip [&hellip;]","og_url":"https:\/\/theeventscalendar.com\/support\/forums\/topic\/wootickets-allows-users-to-purchase-tixs-without-the-password-for-private-events\/","twitter_card":"summary_large_image","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/theeventscalendar.com\/support\/forums\/topic\/wootickets-allows-users-to-purchase-tixs-without-the-password-for-private-events\/","url":"https:\/\/theeventscalendar.com\/support\/forums\/topic\/wootickets-allows-users-to-purchase-tixs-without-the-password-for-private-events\/","name":"Wootickets allows users to purchase tixs without the password for Private Events -","isPartOf":{"@id":"https:\/\/theeventscalendar.com\/support\/#website"},"datePublished":"2013-04-19T07:55:37+00:00","breadcrumb":{"@id":"https:\/\/theeventscalendar.com\/support\/forums\/topic\/wootickets-allows-users-to-purchase-tixs-without-the-password-for-private-events\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/theeventscalendar.com\/support\/forums\/topic\/wootickets-allows-users-to-purchase-tixs-without-the-password-for-private-events\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/theeventscalendar.com\/support\/forums\/topic\/wootickets-allows-users-to-purchase-tixs-without-the-password-for-private-events\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/theeventscalendar.com\/support\/"},{"@type":"ListItem","position":2,"name":"Topics","item":"https:\/\/theeventscalendar.com\/support\/topics\/"},{"@type":"ListItem","position":3,"name":"Ticket Products","item":"https:\/\/theeventscalendar.com\/support\/forums\/forum\/event-tickets\/"},{"@type":"ListItem","position":4,"name":"Event Tickets Plus","item":"https:\/\/theeventscalendar.com\/support\/forums\/forum\/event-tickets\/event-tickets-plus\/"},{"@type":"ListItem","position":5,"name":"Wootickets allows users to purchase tixs without the password for Private Events"}]},{"@type":"WebSite","@id":"https:\/\/theeventscalendar.com\/support\/#website","url":"https:\/\/theeventscalendar.com\/support\/","name":"","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/theeventscalendar.com\/support\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"}]}},"_links":{"self":[{"href":"https:\/\/theeventscalendar.com\/support\/wp-json\/wp\/v2\/topic\/46283","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/theeventscalendar.com\/support\/wp-json\/wp\/v2\/topic"}],"about":[{"href":"https:\/\/theeventscalendar.com\/support\/wp-json\/wp\/v2\/types\/topic"}],"version-history":[{"count":0,"href":"https:\/\/theeventscalendar.com\/support\/wp-json\/wp\/v2\/topic\/46283\/revisions"}],"wp:attachment":[{"href":"https:\/\/theeventscalendar.com\/support\/wp-json\/wp\/v2\/media?parent=46283"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}