X-Cart: shopping cart software

X-Cart forums (https://forum.x-cart.com/index.php)
-   Changing design (https://forum.x-cart.com/forumdisplay.php?f=51)
-   -   Get rid of provider & quantity lines (https://forum.x-cart.com/showthread.php?t=6269)

miss_beth 01-30-2004 09:11 PM

Get rid of provider & quantity lines
 
Almost ready to go live and noticed that when a customer checks their order history, there is a line that says provider (a.k.a. the user name of the person that entered the product in the database):

Quote:

Product info

Star Shine Necklace & Earrings #16724
SKU SKU2178
Provider master
Price $ 43.00
Quantity 1 item(s)
Components Selected Item: Earrings

Star Shine Necklace & Earrings #16724
SKU SKU2178
Provider master
Price $ 115.00
Quantity 1 item(s)
Components Selected Item: Both Pieces

Order info


Payment Method Phone Ordering


Now, obviously it looks silly to have the word master written on the product description but it'll look far sillier when someone buys something that my daughter entered and says "sissy" or one that one of my other helpers entered that says "idontcare" because he couldn't think of a user name. :lol:

Can someone tell me where/how to remove that line totally? I'd also like to remove the line that says Quantity 1 item(s).

~Beth

leon 01-31-2004 01:37 AM

Thats done in the /skin1/main/order_info.tpl file, and you are absolutely right about showing that info, not because it looks silly, its because it is using the direct username for the provider which gives a hint to a possible hacker.

Just take these lines out:
Code:

<tr>
  <td valign="top">{$lng.lbl_provider}</td>
  <td valign="top">{$products[prod_num].provider}</td>
</tr>


miss_beth 01-31-2004 06:53 AM

Thanks! Yes, I thought about the security issue but one of the things on my checklist of "to dos" before opening is to delete all the temp admin accounts I made during setup so none of them would have been valid anyway. Given that, I guess the aesthetics were all I was thinking about.

Wonder why this is included in the file? Seems an odd thing to post to the customer's side (the admin user name, that is).

~Beth

leon 01-31-2004 02:01 PM

I agree, it should have an Admin conditional IF A then show. Or at least have the provider name, not login.


All times are GMT -8. The time now is 08:53 AM.

Powered by vBulletin Version 3.5.4
Copyright ©2000 - 2025, Jelsoft Enterprises Ltd.