Shopify: Improve order status
planned
Rafal Zawadzki
planned
B
Brian
This is a major security issue if a second identifier is not added before data is pulled and presented via the API. Anyone can simply change the order ID and see what other people are purchasing, bad for business.
a
aj wilson
Brian: Definitely agree ... having the option to verify by 2-3 (or more) "verifiers" (i.e. email, address, order number and/or name, etc) would help bolster security.
And maybe an admin option to only search X number of months or X amount of orders, otherwise, error message = "We're having trouble finding your order ... we'll pass your details onto our support desk and someone will get back to you asap" >> Email Support.