Admin Abandon Link

  • Resolved sunkistcrush

    (@sunkistcrush)


    6 years, 11 months ago

    The abandoned cart link automatically logs you into that account from the email.

    As admin, I clicked on the link and it logged me into the admin account on a different browser. I tested 3 browsers and anon modes and it logged into the admin account with full access which had belonged to that account. Seems like a security risk if someone had the link?

Viewing 1 replies (of 1 total)
  • Plugin Support priyankajagtap

    (@priyankajagtap)

    6 years, 11 months ago

    Hi @sunkistcrush,

    In our Abandoned Cart Lite plugin, if the cart is abandoned by the registered user and if someone clicks on the link from reminder email then, in that case, we log in that customer and load the cart for enabling faster checkout for those users.

    However, if the user has abandoned a cart with the admin email address but as a guest user then, in that case, we do load the cart without login to the site. So the security here is managed and we do not just login based on the email address.

    I understand your concern regarding security. We do not just login based on email address but we login if the cart has abandoned by the registered user. This is how our plugin works. I hope you understand it.

    If you have any other suggestions specific to admin users then we would be glad to consider your request.

    Regards,
    Priyanka Jagtap

Viewing 1 replies (of 1 total)

The topic ‘Admin Abandon Link’ is closed to new replies.