Security Issues VM IDnR Addon

[smedi08]

Hi, I detect that all user have acces to this URL

ndex.php?option=com_phocapdf&view=pdf&format=phocapdf&tmpl=component&type=invoice&order_id=238&delivery_id=98, change order_id the user have grant access to order data and confidencial personal data.

I consider this issue very important. I have desactivate the plugin, have this issue solution....

Is very dangerous for all customer using this component

[Jan]

Hi, thank you for this info, fixed in version 1.0.2 (plugin version, just update it)
https://www.phoca.cz/download/category/4 ... art-plugin
Jan

[smedi08]

Hi, the problem is solved but any i have a news issues.
The admin can´t view the invoice from backend and not automatic invoice on change status order is generated
The config in the componet has changed....i don´t modified the email text sent to customer this option not appear