|
SfDBT
|
September 28, 2020 at 8:53 am
Hi, This has been reported to me by a customer to the site. When they went to the payment page the previous customers email address was visible in the email address field. This is a date protection issue and I need to address it urgently.
Thanks for your help.
|
|
SfDBT
|
September 28, 2020 at 8:54 am
*data protection!
|
|
Tony
|
September 28, 2020 at 11:33 am
Hi there,
EE itself does not save the last registrants data to display again so it’s likely due to caching (be it a plugin or server side).
Can you link me to an event I can view this on, please?
|
|
SfDBT
|
September 28, 2020 at 12:36 pm
Hi Tony,
Thank you for responding. I can’t replicate the issue. I’m not sure if the second customer was on the same device (doesn’t sound like it) but possibly the same network. Here is the email I received which might make the issue clearer?
Hi Mike,
I initially struggled to get to the payment page. I am a non-member and this is the first time that I have tried your system. It was when I got to the payment page that asked for card details. The email above the card detail request belonged to my colleague who may have just paid before me (I am saying this because another work colleague had just emailed us to sign up). I didn’t proceed with inputting card details as I was concerned about the data breach. I tried to access the system again and this time I could not progress to the payment page. Another colleague also spoke about having difficulties accessing this page. I hope that this clarifies the issues. Please let me know when it is sorted.
Regards,
|
|
Tony
|
September 28, 2020 at 2:18 pm
Ok, so if they are doing something really strange on their network with sessions it’s possible then clashed session ID’s, but that is extremely rare, I don’t recall ever having any reports of someone doing so.
Can you link me to an event I can view this on, please?
|
|
SfDBT
|
September 28, 2020 at 2:22 pm
This reply has been marked as private.
|
|
Tony
|
September 28, 2020 at 2:36 pm
Ok, there’s a couple of bits that stand out.
Firstly, the headers on your site show caching headers, have you excluded all of EE’s pages from any caching?
Caching can explain why users are having issues getting to your payment options page, but so can something weird happening with sessions on their network. I can’t reproduce any issues when getting to the payment options and it shows the correct emails for me.
Right now, your using Stripe as your payment method but your using ‘Stripe checkout’ which has now been deprecated by Stripe themselves so I recommend switching to ‘Stripe Elements’ and you can do this within:
Event Espresso -> Payment methods -> Stripe -> Intergration type.
It works a little differently to Checkout in that it looks more like an ‘onsite’ payment method, but is actually offsite.
|
