Help for Aimeos

Hey Guys,

Quick question: In Aimeos 17.4 the order_id was included in the url on the confirmation page. Why was it removed in 17.5 and is there any way to retrieve the order id once I reach the authorization page that forwards me to the payment provider?

Cheers

The order ID at the checkout confirm page wasn't used at all because it can be tampered by a malicious user and you shouldn't rely on it. By default, the order ID and the order details are still shown on the checkout confirm page to the customer.

On the checkout process page that redirects to the payment gateway, the order ID is still part of the data that is handed over to the payment gateway.

For which reason do you need the order ID?

Hi

we are ajaxing the entire order.
As we are uploading a bunch of images we need to associate those pictures with the order number.

I can't find the order_id in the query string that is posted to the server. In the past version the order_number was included in the ACTION of the form that was triggered when the authorization page was loading.
Any idea how to retrieve it?

Thank you in advance,
ltw

As you can't rely on the integrity of the order ID, you shouldn't use it for that case either.

Have you seen our new JSON REST API?
https://aimeos.org/docs/Developers/Client/JSONAPI

You can mix or even completely replace the checkout by remote controlling the shop via Javascript from the browser. The documentation how to use the "basket" and "order" resources is not yet ready but it works the same way as described for the "product", "catalog" and other resources. Using the JSON REST API you have full control over the data in a secure way and can upload the files before redirecting to the payment gateway.