Skip to content

Conversation

@Jade-GG
Copy link
Collaborator

@Jade-GG Jade-GG commented Oct 24, 2024

Previously, you could just type in any random password in the password box and it would validate without the need to log in, allowing people to actually try placing an order on an existing account without logging in.

This fixes that bug. I'm not sure if this is also a thing in 3.x as that checkout works quite differently, so I haven't made a PR for that.

@royduin
Copy link
Member

royduin commented Oct 31, 2024

I'd like to know if v3 also needs a fix for this

@Jade-GG
Copy link
Collaborator Author

Jade-GG commented Oct 31, 2024

I'd like to know if v3 also needs a fix for this

From what I can see, the form will still validate incorrectly on v3: https://github.com/rapidez/core/blob/master/resources/views/checkout/steps/login.blade.php

So v3 will likely also need a fix unless I'm missing something wrapped around it that validates the login credentials.

@royduin
Copy link
Member

royduin commented Nov 1, 2024

Could you arrange that?

@Jade-GG
Copy link
Collaborator Author

Jade-GG commented Nov 1, 2024

Could you arrange that?

#626 😇

@royduin
Copy link
Member

royduin commented Nov 5, 2024

Any info?

@royduin royduin merged commit b149cc0 into 2.x Nov 6, 2024
12 of 15 checks passed
@royduin royduin deleted the feature/password-check branch November 6, 2024 14:01
royduin pushed a commit that referenced this pull request Nov 13, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants