OpenCart Community

Is there a extension that allows you to view tracking on your own site? I looked thru a few shipping/tracking extensions and couldnt find one that shows the tracking info on your own website, instead of linking to UPS, FEDEX etc etc..

how about those ?
---
Track Order Plugin 2.0 and 2.1 with status and custom comment
http://www.opencart.com/index.php?route ... n_id=25107
---
Order Tracking v2
ALREADY REMOVED from the Etension Section!
---
found here:
http://www.opencart.com/index.php?route ... r%20Module
---
Ernie
openshop.li

As far as I know, they all redirect people to ups, etc sites. You might be able to change the link to display the info from their sites into an iframe or something, but not something I've done in ages myself.

@labelshops: no, the first 2 are using the already internal stored data (did not checked the others).

But !!!! Beware !!
The first script adds a hidden field (invisible - base64decoded) to the form, which says if someone wants to remove this footer, he has to pay 12,- U$

The second is a massive security risk!
First: everyone could check by an email if someone has made an order in this shop.
Second: the database query is not secured, therefore everyone could place a script injection and more!

I recommend NOT TO USE THESE 2!

I really wonder how such lousy coded extensions get approved in the extension store ??

OSWorX wrote:I really wonder how such lousy coded extensions get approved in the extension store ??

sure, but just be realistic, uncounted sites, based on OC, and others, are easy reachable in 'download-modus' on the web, because of the fact, that CHMOD 777 is even proclaimed to be a VALUABLE Setting INSIDE of HTTP-Server Shop Subs. It generally just makes not much sense, to argue about security, as long as most users have no idea, where/how to start, in the first place. It's similar to a WINDOWS, beeing set up in DEFAULT Mode, and nothing to it. But mostly, Windows are beeing set up this way, I assume...

But it's good, to tell the People, that free MOD's may not be as secure as paid one's. One cannot really expect the Best for Nothing, nowhere. And those Downloaders, beeing aware of such, will at least partly be capable, to inform/advise their Customers, at least, not to use a 'commonly known' eMail Address, when shopping online, in General.

But personally, I hate Base64 Stuff, whereever it appears !
Ernie
openshop.li

IP_CAM wrote:sure, but just be realistic, uncounted sites, based on OC, and others, are easy reachable in 'download-modus' on the web, because of the fact, that CHMOD 777 is even proclaimed to be a VALUABLE Setting on HTTP-Servers. It generally just makes not much sense, to argue about security, as long as most users have no idea, where/how to start, in the first place. It's similar to a WINDOWS, beeing set up in DEFAULT Mode, and nothing to it. But mostly, Windows are beeing set up this way, I assume...

But it's good, to tell the People, that free MOD's may not be as secure as paid one's. One cannot really expect the Best for Nothing, nowhere. And those Downloaders, beeing aware of such, will at least partly be capable, to inform/advise their Customers, at least, not to use a 'commonly known' eMail Address, when shopping online, in General.

But personally, I hate Base64 Stuff, whereever it appears !
Ernie
openshop.li

Basically if someone is maintaining his garden, cutting the grass, planting something etc. .. this is his personal pleasure.
But when we come to internet, websites we have to deal with visitors.
And finally if we operate a webshop, we have customers.
And therefore have to take care on security.

So, if someone does not know what this is, it is better the give the job someone else who knows what to do.
A plumber should sell his screws, etc. and not creating webshops.
I for myself call the plumber if something is to do and do it not by myself.

But that seems these days that evey noob and too many others want to do all by themselves - no matter if they know what the are doing, or not!

base64*: that has his authentication, especially when you think in conjunction with images.
And a few other cases where it is really convinient to work with.
But (!!) script kiddies use that also for their own stuff - like the idiot if the tracking extension, where I do not understand why he is using it there ...

I for myself just wanted to highlight that extensions like these never should get be approved - that shows us, that the extension store is currently only a 'cash cow' for a few people.

What is completely wrong is this:

.. that free MOD's may not be as secure as paid one's ..

You would be surprised what can be found in some 'commercial' extensions!
No matter if Free or Paid, none of them should be a security risk!
And there are many, many free extensions which are really good.

Ok so in the end, most will link out to the shippers sites.. Which is fine, which do you guys prefer for notifications etc, good all around shipping component with tracking?