Hi there,
my client used to have iDeal as payment method but decided to implement a payment provider that offers multiple services among which iDeal.
So obviously I disabled the iDeal plugin. But the plugin is still accessible through:
www.clientssite.com/modules/ideal/
And if I call this URL directly in my browser I can still use the plugin to pay for my order! And now I found some weird payments that make me suspect that this old URL is still in some people's browsercache.
So disabling a module is not enough? It needs to be completely removed?
Cheers,
Cees