[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [ic] Track When Prices Adjusted Using Admin Tool


"Andrew Baltino" <suppressed> wrote:
> I am using Usermodifier code similar to that posted here:
> http://www.icdevgroup.org/pipermail/interchange-users/2002-October/027484.html
> 
> However I want to track all orders that have been modified using this
> mv_price modifier.  Does anyone have a suggestion?  Is there a flag
> that is set if a specific modifier is in fact used?
> 
> I can't just compare the price against a products list price because
> there other modifiers and commonadjusts used.
> 
> I want to be able to generate a report on what the price would
> "normally" have been compared to what the final order price was
> modified to.
> 
You really don't want to be setting prices using a mv_price modifier,
for security reasons.

As your <form> will include a (presumably hidden) input field that sets
the price, there's nothing to stop anyone from forging that form and
supplying their own price.

To answer your question, no, there is no flag that gets set when a
modifier is used.  You could define a second modifier name (perhaps
called "price_provided") and set that true/false in a second hidden
variable in your <form>.  You'd still have the same security concerns,
of course.

-- 
   _/   _/  _/_/_/_/  _/    _/  _/_/_/  _/    _/
  _/_/_/   _/_/      _/    _/    _/    _/_/  _/   K e v i n   W a l s h
 _/ _/    _/          _/ _/     _/    _/  _/_/    suppressed
_/   _/  _/_/_/_/      _/    _/_/_/  _/    _/
_______________________________________________
interchange-users mailing list
suppressed
http://www.icdevgroup.org/mailman/listinfo/interchange-users


Mail converted by mhonarc 2.6.15
This archive provided courtesy of JSW4.NET, Internet Hosting Services for Small Business.