[ic] Track When Prices Adjusted Using Admin Tool

Kevin Walsh kevin at cursor.biz
Sun Aug 6 16:24:11 EDT 2006


"Andrew Baltino" <augustine.andrew at gmail.com> wrote:
> I am using Usermodifier code similar to that posted here:
> http://www.icdevgroup.org/pipermail/interchange-users/2002-October/027484.html
> 
> However I want to track all orders that have been modified using this
> mv_price modifier.  Does anyone have a suggestion?  Is there a flag
> that is set if a specific modifier is in fact used?
> 
> I can't just compare the price against a products list price because
> there other modifiers and commonadjusts used.
> 
> I want to be able to generate a report on what the price would
> "normally" have been compared to what the final order price was
> modified to.
> 
You really don't want to be setting prices using a mv_price modifier,
for security reasons.

As your <form> will include a (presumably hidden) input field that sets
the price, there's nothing to stop anyone from forging that form and
supplying their own price.

To answer your question, no, there is no flag that gets set when a
modifier is used.  You could define a second modifier name (perhaps
called "price_provided") and set that true/false in a second hidden
variable in your <form>.  You'd still have the same security concerns,
of course.

-- 
   _/   _/  _/_/_/_/  _/    _/  _/_/_/  _/    _/
  _/_/_/   _/_/      _/    _/    _/    _/_/  _/   K e v i n   W a l s h
 _/ _/    _/          _/ _/     _/    _/  _/_/    kevin at cursor.biz
_/   _/  _/_/_/_/      _/    _/_/_/  _/    _/


More information about the interchange-users mailing list