Buy Now very broken

Garrett Albright - February 3, 2009 - 00:42
Project:Ubercart Auction
Version:6.x-1.x-dev
Component:Code
Category:bug report
Priority:critical
Assigned:Garrett Albright
Status:active
Description

A tester on the site UC Auction is being developed for seemed to discover a rather nasty bug. When he placed a bid for a product and then used the Buy Now feature, he was only billed for the bid value, not the Buy Now value. With this bug, it's possible for people to "cheat" on auctions by effectively instantly winning it immediately after placing a bid.

#1

Garrett Albright - February 3, 2009 - 17:03
Title:Bid, then Buy Now; only pay bid price» Buy Now very broken

Actually, it looks like Buy Now is currently allowing anyone to buy an item immediately at the current high bid value. Damn, has that always been the case?

#2

Garrett Albright - February 3, 2009 - 17:07

No, because the problem is some fairly recent code in uc_auction_cart_item() which isn't being implemented very well.

#3

Garrett Albright - February 3, 2009 - 19:40
Status:active» fixed

Fixed, I think.

#4

System Message - February 17, 2009 - 19:50
Status:fixed» closed

Automatically closed -- issue fixed for 2 weeks with no activity.

#5

gjerdery - March 9, 2009 - 16:24
Status:closed» active

After installing the latest edition, from March 8, I still see the behavior described above.

#6

gjerdery - March 11, 2009 - 13:30

Just wanted to note that I believe I'm still seeing this bug after installing the CVS files from HEAD.

Before I applied the code, I had an item in my cart which was showing the BIN price incorrectly (Listed BIN was $10, highest bid amount was $2, and price in my cart was $2). After applying the code, it correctly displayed as $10. However, in testing of subsequent items, the old behavior of the highest previous bid being reported as the BIN price reemerged. Let me know if there is any way I can help troubleshoot.

#7

gjerdery - October 15, 2009 - 19:28

It has been a while since I've had time to work with our uc_auction installation, but it appears that the latest Sept. 26 release still allows a Buy it Now item to be purchased for the high bid price rather than the sent BIN price.

#8

manta007 - November 6, 2009 - 09:34

I'm using Ubercart Auction 6.x-1.x-dev. Ifbuy now functionality is enable for a product, then the max bidder can not buy that product after expiring the auction. After auction expiration "Add to cart" button displays for the max bidder. But after clicking on "submit order" button, following message appears.
"Your order could not continue because one of the items you are trying to purchase using the “Buy Now” feature cannot be purchased because it has expired. Please remove the item from your cart to continue.". I don't know why that message appears. Anyone can help me?.......

 
 

Drupal is a registered trademark of Dries Buytaert.