Disaster - PayPal payments create duplicate order

  • Posts: 14
  • Thank you received: 0
13 years 4 months ago #21038

Hi there

I have had to unpublished Hikashop today after using it for 4 months (vers 1.5.1) because we discovered duplicate orders were being created at random when users were paying by PayPal.

This was unfortunately only discovered after our latest event which meant that around 28 people got access to an event that should not have got access and we lost $560 in revenue - and that's only the ones we know of now!!

I cannot figure out the problem without doing a forensic audit, but it seems that a user places an order, pays with PayPal, the order is created and, then about 2 minutes later another (duplicate) order is created and is marked paid with PayPal. We did not notice that the first order is marked "created" only but the second one is marked "confirmed" - so it does seem as if the PayPal payment confirmation creates a new order randomly. Will need to investigate

This is really exceptionally serious and if you have any idea what could cause this or if you have seen it before I would appreciate your letting me know.

Cliff

Last edit: 13 years 4 months ago by cliffvt.

Please Log in or Create an account to join the conversation.

  • Posts: 82868
  • Thank you received: 13376
  • MODERATOR
13 years 4 months ago #21039

Hi,

It sounds like you changed the "Default order status" to confirmed, instead of created in the main tab of the configuration of HikaShop. That would explain why the orders were directly confirmed before the payment was made.

Please Log in or Create an account to join the conversation.

  • Posts: 14
  • Thank you received: 0
13 years 4 months ago #21040

No, the defualt status is "created" and if you read my post carefully, the two orders are shown as one = "created" and the other = "confirmed"

Please Log in or Create an account to join the conversation.

  • Posts: 82868
  • Thank you received: 13376
  • MODERATOR
13 years 4 months ago #21041

Then, are you sure that it's not the customers, trying to order something, but going back from paypal for some reason and then ordering again the product and then paying for it ?
That happens sometimes and you should only ship/accept orders which are confirmed.

There is no code which can duplicate an order in HikaShop.

Please Log in or Create an account to join the conversation.

  • Posts: 14
  • Thank you received: 0
13 years 4 months ago #21043

Ok, so this means that the issue we discussed a few weeks ago where the changes that you are making to ensure the cart is only deleted once the PayPal payment is successful will sort this issue out. If a user comes back from paypal then the cart should still be there as unpaid whi8ch will then eliminate duplicate orders.

Has this been implemented in 1.5.2 - I think you said it had?

When we exported the orders for shipping we never checked on the status... our fault!

Thanks a lot

Cliff

Please Log in or Create an account to join the conversation.

  • Posts: 82868
  • Thank you received: 13376
  • MODERATOR
13 years 4 months ago #21044

In the latest edition, the order is still created before sending the user to paypal (that has to be done that way), however, if the user clicks on the cancel button, he is back on the checkout from where he came and the order which was created is changed to cancelled automatically.

We don't delete the order (you could always do that with a small hikashop plugin though).

And yes, you should only export the orders which are confirmed. Normally, you should be able to select the order status before clicking on the export button on the orders listing in the latest version.

Please Log in or Create an account to join the conversation.

Time to create page: 0.066 seconds
Powered by Kunena Forum