Birthday present module using it to fraud

[Martin C]

I wonder if somebody use the birthday module, I tested this module and it works really good, to good I believe.
If a customer has a validated order and today is his birthday he will receive a voucher if a cronjob is running.
But what will happen if he changed his birthday in his account to tomorrow.
The cronjob is running again and yes he will receive a voucher again.
Am I overlooking something or is it a possiblity to fraud!

Martin

[rocky]

Yes, that it a problem. You could modify identify.tpl and disable or remove the birthday code from there. That way, the customer cannot change their birthday. They could only enter their birthday when registering. You'd need to add a note to authentication.tpl to let the customer know that they should enter their correct birthday when registering, since they can't change it afterwards.

[Martin C]

Thanks Rocky, That was also my idea to prevent duplicate vouchers

[deech123]

rocky

to commend out the part in your identity.tpl that's no problem.
but when the customers tries to change something in his name or what ever, then when he pushed update, then his birthday becomes empty....
any idea to solve this?

ps, set the select to disabled works that the client can not change it, but still after update the date is empty.

[deech123]

I found a correct way to solve this.

first add before the select of the brithday this part. Now the user will see the birthday in a form field that is disabled.
if he/she see that date is not correct they can contact you.
go to the file in your theme folder/identify.tpl
and look for line 57 and then add/change this piece.

{l s='Birthday'}
 <input type="birthday" name="birthday" id="birthday" value="{$smarty.post.birthday|date_format:'%d-%m-%Y'}" disabled/>

and then the whole selection stuff you just hide it by the div.
at :

{l s='Birthday'}
......

-
{foreach from=$years item=v}
{$v|escape:'htmlall':'UTF-8'}  
{/foreach}

so just add a div wrap around the whole select stuff.
in that case when users change their name,password or whatever, then they don't change the date or reset it.

hope this will help you out.

[ecoshop]

Hi !

I had the same concern with the fraud problem. Thanks for the solution. But could you please be more specific to where (line #) and in what document we should make the change.

Best regards
Gonzalo

[deech123]

I add the page and line in the post with the code.

[ecoshop]

That's right. Thanks

[deech123]

change the subject to [sOLVED] if this problem is solved for you :-)

greetz