Quote:
|
Originally Posted by cflsystems
I have done this as a module to few clients. Check order status based on ordered and email. There are no security issues with this approach.
Just create a page with form to supply ordered and email, you can add date if you want to but you will have make sure there is only one way of customer to have the date entered or if any format is allowed your script has to be flexible at converting it to unix timestamp.
Make sure your script runs as part of XC - that way XC security will check for any issues with entries and strip out if anything.
Then check orders table for matching ordered and email (and date if needed). You should get only one or 0 results. Done.
And of course output only order status info - there is no need of what was ordered, price, etc.
|
Steve, I'd be interested in seeing your implementation.