[3]Something really weird happened to me today. We have received a fraud order today with the product which doesn’t belong to our store. Order is in the Order Manager but of course wasn’t authorized. Anyone can explain me how could that happen? [/3]

I don't think so... It wasn't real order, someone knew what he was doing. Check his billing/shipping address;

<SPAN id=ctl00_MainContent_BillingAddressField>A. Customer
1212 Road St.
Bradenton, FL 34202
123-456-6953
<SPAN id=ctl00_MainContent_EmailAddressField>[email protected]

As you can see, this is the fraud order. I can't just understand how this order went through the system...

not yet... should I create a ticket?

I'd say definately. If someone was able to gain access to your store to the point that they were able to buy items not in your store they've figured out something and it's not good.

<SPAN style="FONT-SIZE: 10pt; COLOR: black; FONT-FAMILY: Verdana">I’ve just created a ticket for that issue. This is really unbelievable; I still don't understand hoe could that happen...<?xml:namespace prefix = o ns = "urn:schemas-microsoft-com:office:office" /><o:p></o:p>

<o:p>[3] [/3]</o:p>

I'm not sure what you mean by "cached somehow by Yahoo". Did you have a Yahoo store and switch over? Are these products still in your store but just inactive?

Oh, so someone searched on yahoo and found a link to a product which was inactive, but was still able to purchase the product. Can you give me an example of one of these links? Hopefully we can get to the bottom of this and fix it before SP3 comes out.

The application should still stop someone from checking out with an inactive product, I believe that we have some hot fixes that address the issue.

I don't know if this will help or not but my guess would be, when someone did a search and clicked on the link, they really clicked on one of the cached pages instead of the site hyper link. My guess would be, they clicked on one of the cached product pages.

Next - lets say instead of removing the product from your store, you just inactivate it, so it doesn't show up. If it is a non inventory product or if you still have it in your store with positive inventory (just inactive) you should be able to purchase the product only if you can find it on the site. If the old product address is stored in one of the old pages on the search engine (and it is still a valid address) you should be able to bring it up and buy it. If the inventory is at zero he should not be able to purchase it.

I'm guessing this could be the case because I get an daily email from our site telling me which products are out of stock. All of them were sold out and have been checked as inactive (not removed). I haven't gotten around to figuring out how to fix it yet.

I did find a search engine (cant remember which one) that had cached pages for my site from several years ago. It was a nostalgia trip for me to see how much our site had improved from before BV to the present.

Hope this helps.

Bob Noble

<SPAN style="FONT-SIZE: 10pt; COLOR: black; FONT-FAMILY: Verdana">Just received another order... I don't sell this product anymore, about 10-12 month… It is Inactive, Inventory=0. I have searched that item on Google and I found out that several Inactive items still cached and available on Google. I clicked on the Google link and I am able to add that item to the shopping cart and finish the purchase… How do I fix it?<?xml:namespace prefix = o ns = "urn:schemas-microsoft-com:office:office" /><o:p></o:p>

<o:p>[3] [/3]</o:p>