Invoices exposed to other BuddyPress members

This topic contains 12 replies, has 3 voices, and was last updated by  Patrik 4 years, 9 months ago.

We have moved to a support ticketing system and our forums are now closed.

Open Support Ticket
  • Author
    Posts
  • July 13, 2019 at 10:15 am #3236

    Martin Steimann
    Free User
    Post count: 262

    Hello,

    today I noticed that GD invoices of members can be viewed by any other member. Also every member has invoices in his inbox, which belong to other members.

    I remember after the latest update a WP invoicing message appeared somewhere stating that I should run a process that would fix something. I wanted to hit the button but was in the middle of maintenance so I decided to take care of it later. Now the message has disappeared.

    Will provide you with credentials…

    Regards,
    Martin

    July 13, 2019 at 10:17 am #3237

    Martin Steimann
    Free User
    Post count: 262
    This reply has been marked as private.
    July 13, 2019 at 1:06 pm #3238

    Guust
    Moderator
    Post count: 29970

    The invoices you see are your own invoices, you cannot see other people’s invoices unless you are an admin.
    For example, login as the test user, and try to see this invoice:
    …/wpi_invoice/inv-11734/

    I do agree that other users should not have an invoices tab, only your profile should have that tab. I’ll get the developers to check the BuddyPress integration.

    Thanks

    July 13, 2019 at 1:14 pm #3239

    Martin Steimann
    Free User
    Post count: 262
    This reply has been marked as private.
    July 13, 2019 at 1:29 pm #3240

    Guust
    Moderator
    Post count: 29970
    This reply has been marked as private.
    July 13, 2019 at 1:51 pm #3241

    Martin Steimann
    Free User
    Post count: 262
    This reply has been marked as private.
    July 15, 2019 at 10:19 am #3245

    Patrik
    Moderator
    Post count: 1971

    Hi,

    “My Invoices” tab is visible to other users currently and the count is showing for paid invoices but it will be for all invoices of that profile.

    We have applied the fix for this issue and will be available in the next release of the plugin. Let us know the FTP details if you want to apply the fix on your site.

    Regards,
    Patrik

    July 15, 2019 at 10:31 am #3246

    Martin Steimann
    Free User
    Post count: 262
    This reply has been marked as private.
    July 15, 2019 at 11:16 am #3247

    Patrik
    Moderator
    Post count: 1971

    Hi,

    Can you please check the FTP details as it is not working for me and giving an error “Authentication failed.”

    Regards,
    Patrik

    July 15, 2019 at 11:33 am #3248

    Martin Steimann
    Free User
    Post count: 262
    This reply has been marked as private.
    July 15, 2019 at 11:46 am #3250

    Patrik
    Moderator
    Post count: 1971

    Hi,

    I am able to access the server now and I have also made the changes. Please review it from your side and let me know if you find any issues.

    Regards,
    Patrik

    July 15, 2019 at 11:50 am #3251

    Martin Steimann
    Free User
    Post count: 262

    Perfect – everything is back to normal. Thanks a lot for fixing this issue!

    Regards,
    Martin

    July 15, 2019 at 11:55 am #3252

    Patrik
    Moderator
    Post count: 1971
    This reply has been marked as private.
  • Author
    Posts
Viewing 13 posts - 1 through 13 (of 13 total)

We have moved to a support ticketing system and our forums are now closed.

Open Support Ticket