1 / 4
May 2010

Hello,



I have had 3 orders in the last 2 days that are completely messed up - the first has no client information whatsoever except the zip code, the second has no e-mail address, and the 3rd is missing about half the customer information. As I know they cannot go through checkout, much less pay, without this information being input, I am wondering where it went. This has never happened before. Nothing has changed in my account, website, code, or anything else for that matter in the last several weeks.



Here are the order numbers:



5685907

5686645

5688747



Please advise, as it is hard to fulfill an order when all you have is a zip code.

I am sending you an email separately to provide all the data we were able to capture for the transactions you referenced.



Our card-based direct-payment checkout pages normally have something called field validation to make sure buyers enter all required info, and in the proper format where required. However, we recently edited our validation script to allow "+" characters in emails (which some people use to add keywords to their gmail address), and apparently our engineer made a minor mistake that effectively disabled the validation, so buyers were briefly able to complete checkout after entering incomplete or malformed data, until we discovered and could fix the mistake, which is now resolved. Interestingly, this gaffe revealed that apparently Authorize.Net allows checkouts with certain data left incomplete, so without our usual field validation in full effect, it would be possible to check out without providing a name!

I had actually contacted Authorize first, and it turns out that when setting up our account with them, I turned off most validation, so if the customer had either the postal/zip code or the address right, it would go through. All of the malformed orders had at least one of those two correct.



I have fixed this, for obvious reasons :)



Thank you very much for looking into this quickly.