I have Gift Vouchers disabled (in Extensions -> Order Totals). The extension is not even installed. However, someone purchased a $1 Gift Certificate and it shows up in our orders. On our front end, there is no link to purchase vouchers. I read elsewhere to go to Settings -> Store -> edit -> Option -> Vouchers (set the voucher min to 0 and max to 0). When I set those values to 0, it gives me an error saying "Minimum voucher amount required!" and "Maximum voucher amount required!" So I've left those values at 1 for now. Does anyone know of any other way to prevent this from happening again?
Last edited by RideTheWave on Tue Sep 09, 2025 8:43 pm, edited 3 times in total.
Could be some sort on BIN attack. The topics below may be helpful.
viewtopic.php?t=235930
viewtopic.php?t=230326#p862363
viewtopic.php?t=235930
viewtopic.php?t=230326#p862363
As it seems, we should add a PR when such items are disabled those controllers should be "listen" to that and send customers to the mainpage .. and not creating anything else.
What you all think of that?
What you all think of that?
Full Stack Web Developer :: Dedicated OpenCart Development & Support DACH Region
Contact for Custom Work / Fast Support.
I think that would be a better way than doing 404.
Got a burning question at 3 AM that even Google shrugs at? There’s a not-so-secret inbox that might just have your answer: khnaz35@gmail.com
Breathe in some nature while you're at it. It’s cheaper than therapy. 
Feel free to sling a bear my way via PayPal @ khnaz35@gmail.com
Disabling the controller would be very helpful in this case. You would also need to add options in the sittings to actually disable gift vouchers. You can disable the voucher total extension, but that doesn't stop vouchers from being purchased.
Another quick workaround is to the set the Voucher Max value to a lower value than Voucher Min in the settings. This stops gift vouchers from being purchased without having to modify the code.
Have you searched for extensions that remove the functionality?RideTheWave wrote: ↑Tue Sep 09, 2025 11:47 amDoes anyone know of any other way to prevent this from happening again?
UK OpenCart Hosting | OpenCart Audits | OpenCart Support - please email info@antropy.co.uk
Who is online
Users browsing this forum: No registered users and 26 guests
