OpenCart Community

i'm using 1.4.3.

when a customer has ordered something and receives a link to view the order, they receive a link to the following:

http://www.domain.com/index.php?route=a ... rder_id=45

if they are logged out of the site at the time, they are presented with the login screen. and here's where 2 issues arise.

1) when the person logs in, they are redirected to the following url address:

http://www.domain.com/index.php?route=account/invoice&order_id=45

with an error saying that the order invoice could not be found ( obviously ). when manually changing the '&' to just '&' it goes to the order invoice online just fine. but somewhere along the road it's not converting the '&' into '&' for the redirect. how do i find the correct place to make sure that the redirect works properly? i've narrowed it down to
catalog/controller/common/header.php, somewhere between lines 119-138, but don't know if that's the final place it goes before conversion.


issue 2) when someone who doesn't have an order accessible to their account, but modifies the url address from

http://www.domain.com/index.php?route=a ... rder_id=45

to

http://www.domain.com/index.php?route=a ... rder_id=75

to try and just view another invoice, there is an error that says :

"undefined index: order_id in catalog/controller/account/invoice.php on line 41"

when looking at that file, it looks to assume that there is already a valid order_id and doesn't verify that there really is one in the breadcrumbs, hence the error. where should i correct this at?

thanks for taking the time to help out guys, i appreciate it!

rocksteady,
danno~

bump!
( now been 24 hours )

This is a bug.

/catalog/controller/account/login.php
Line 31 fix

awesome, thanks for the fix, i appreciate it!