Users can exploit input fields to learn about stock quantities

  • Resolved RockYourBlog

    (@rockyourblog)


    1 year, 10 months ago

    Hey there,

    a client sells tickets for events. He does not want customers to be able to see how many tickets are still in stock.

    So I changed the corresponding settings in Woocommerce and the stock quantity is no longer displayed in the shopping cart and on product pages – so far so good.

    However, we had to find out that the input boxes have a “max” attribute, which in turn means that anyone can still see the actual total available amount of tickets.

    This works by either using the built in increment (which will stop when reaching max value) or by entering an amount that exceeds the max value and clicking “update cart” – you will then get a notice that the amount has to be equal to or less than the max value.

    You can see an example here: https://imgur.com/a/6D6sYLt

    So how do we prevent this from happening? Any workarounds?

    The page I need help with: [log in to see the link]

Viewing 4 replies - 1 through 4 (of 4 total)

  • Hello,

    To start checking this for you, please share a copy of your site’s System Status Report: You can find it via WooCommerce > Status. Select “Get system report” and then “Copy for support”.?

    Looking forward to hearing from you.

    Thread Starter RockYourBlog

    (@rockyourblog)

    Hey Igor,

    thank you for your reply!

    Can you please specifiy which information from the status report you need? I do not want to post the complete report here publicly, as it contains sensitive information about the website.

    Or is there a way to send this to you privately?

    Hi @rockyourblog

    I replicated the scenario above, and I was able to reproduce the issue here.

    I believe this is the default behavior of WooCommerce, since, it prevents customers from buying more than the stock quantity of a product. Hence, you are receiving the error message above when you input more than the stock quantity on the Cart page.

    These forums are meant for general support with the core functionality of WooCommerce itself. What you want to achieve is a bit complex and would require customization to do it. Since custom coding is outside our scope of support, I am leaving this thread open for a bit to see if anyone can chime in to help you out.

    For questions related to development and custom coding, your best bet is to ask on any of these channels for support. We’re lucky to have a great community of open-source developers for WooCommerce, and many of our developers hang out there, too.

    Hope this helps!

    Plugin Support Gabriel – a11n

    (@gabrielfuentes)

    Since we haven’t heard from you for a while, I’m marking this as resolved. We’re always here to help.

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘Users can exploit input fields to learn about stock quantities’ is closed to new replies.