CGM_Public/pretix_original
2
0
Fork 1
mirror of https://github.com/pretix/pretix.git synced 2026-05-08 15:44:02 +00:00
Code Issues Packages Projects Releases Wiki Activity

Raise 404 on opening unknown order

Browse Source 
PRETIXEU-12Q
This commit is contained in:
Raphael Michel
2019-05-16 10:05:58 +02:00
parent b19df33dda
commit 2b818f42cd
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
src/pretix/presale/views/order.py
View File

@@ -67,7 +67,9 @@ class OrderDetailMixin(NoSearchIndexViewMixin):
@method_decorator(xframe_options_exempt, 'dispatch') @method_decorator(xframe_options_exempt, 'dispatch')
class OrderOpen(EventViewMixin, OrderDetailMixin, View): class OrderOpen(EventViewMixin, OrderDetailMixin, View):
def dispatch(self, request, *args, **kwargs): def get(self, request, *args, **kwargs):
if not self.order:
raise Http404(_('Unknown order code or not authorized to access this order.'))
if kwargs.get('hash') == self.order.email_confirm_hash(): if kwargs.get('hash') == self.order.email_confirm_hash():
self.order.email_known_to_work = True self.order.email_known_to_work = True
self.order.save(update_fields=['email_known_to_work']) self.order.save(update_fields=['email_known_to_work'])