X-Cart forums

[miss_beth]

Almost ready to go live and noticed that when a customer checks their order history, there is a line that says provider (a.k.a. the user name of the person that entered the product in the database):

Product info

Star Shine Necklace & Earrings #16724
SKU SKU2178
Provider master
Price $ 43.00
Quantity 1 item(s)
Components Selected Item: Earrings

Star Shine Necklace & Earrings #16724
SKU SKU2178
Provider master
Price $ 115.00
Quantity 1 item(s)
Components Selected Item: Both Pieces

Order info


Payment Method Phone Ordering

Now, obviously it looks silly to have the word master written on the product description but it'll look far sillier when someone buys something that my daughter entered and says "sissy" or one that one of my other helpers entered that says "idontcare" because he couldn't think of a user name.

Can someone tell me where/how to remove that line totally? I'd also like to remove the line that says Quantity 1 item(s).

~Beth

[leon]

Thats done in the /skin1/main/order_info.tpl file, and you are absolutely right about showing that info, not because it looks silly, its because it is using the direct username for the provider which gives a hint to a possible hacker.

Just take these lines out:

<tr>
  <td valign="top">{$lng.lbl_provider}</td>
  <td valign="top">{$products[prod_num].provider}</td>
</tr>

[miss_beth]

Thanks! Yes, I thought about the security issue but one of the things on my checklist of "to dos" before opening is to delete all the temp admin accounts I made during setup so none of them would have been valid anyway. Given that, I guess the aesthetics were all I was thinking about.

Wonder why this is included in the file? Seems an odd thing to post to the customer's side (the admin user name, that is).

~Beth

[leon]

I agree, it should have an Admin conditional IF A then show. Or at least have the provider name, not login.