Download link remains available after logging out

  • Resolved jcanti

    (@jcanti)


    6 months, 1 week ago

    Hi,

    I’m trying out the plugin and I really like it so far. But I did notice that when logged out, the download link for orders I made when logged in remains available on the order receipt, and I can download the file as an anonymous user.

    This isn’t available from an incognito tab going to the same link – and in fact goes away after I clear the cookies for the site, and then I see the login form when trying to view the same receipt.

    Perhaps I have missed something? It is very unlikely that someone would actually be able to make use of this, but I could imagine on shared or public computers it could be a problem. Do cookies not get cleared upon logout?

    Many thanks, Joe

Viewing 1 replies (of 1 total)
  • Plugin Support Mihai Joldis

    (@misulicus)

    Hey @jcanti

    Apologies for the delay here. Most likely the purchase session is cached in the browser’s data. I just tested this on my end and after logging out, the Confirmation and Receipt pages no longer show the purchase data.

    Most likely there is some caching involved on your website.

Viewing 1 replies (of 1 total)
  • You must be logged in to reply to this topic.