I found a bug in multilanguage sites with url prefix activated.

uc_referer_check in uc_store.module is not able to validate the referer correctly as it's not taking into account the language url prefix, therefore not validating the order review and sending an empty cart error to the user.

The user can not complete the checkout if they are in an alternate site language.

I made a quick fix but it's not a very elegant solution.

CommentFileSizeAuthor
#1 ubercart-i18n_urls-1399558-1.patch703 bytesvictorcoder
Support from Acquia helps fund testing for Drupal Acquia logo

Comments

victorcoder’s picture

victorcoder CreditAttribution: victorcoder commented
FileSize
ubercart-i18n_urls-1399558-1.patch703 bytes

Status: Needs review » Needs work

The last submitted patch, ubercart-i18n_urls-1399558-1.patch, failed testing.

longwave’s picture

longwave
he/him
Primary language English
Location UK
CreditAttribution: longwave commented
Priority: Critical » Normal

I would like to see this removed entirely in #273574: Reduce HTTP_REFERER checks. As noted this isn't exactly elegant (but neither was the original code).

mike24’s picture

mike24 CreditAttribution: mike24 commented

I installed the 6.x-2.10 and this bug seems still applicable. Is there an estimated fixing date ?

longwave’s picture

longwave
he/him
Primary language English
Location UK
CreditAttribution: longwave commented

Please test the patch in #273574-38: Reduce HTTP_REFERER checks which removes the referer checks and should solve this bug.

longwave’s picture

longwave
he/him
Primary language English
Location UK
CreditAttribution: longwave commented
Status: Needs work » Closed (duplicate)

Closing as duplicate of #273574: Reduce HTTP_REFERER checks