Fix #122 -- Allow users to re-send order links (#197)

If the provided mail address has not ordered anything, there will still
be a mail generated and sent to an invalid mail address, to avoid
obvious timing attacks to determine active users.
This commit is contained in:
Tobias Kunze
2016-09-01 08:59:36 +02:00
committed by Raphael Michel
parent 841cfe52a2
commit 7e19effe3c
7 changed files with 189 additions and 2 deletions

View File

@@ -6,6 +6,7 @@ import pretix.presale.views.event
import pretix.presale.views.locale
import pretix.presale.views.order
import pretix.presale.views.organizer
import pretix.presale.views.user
# This is not a valid Django URL configuration, as the final
# configuration is done by the pretix.multidomain package.
@@ -18,6 +19,7 @@ event_patterns = [
name='event.redeem'),
url(r'^checkout/(?P<step>[^/]+)/$', pretix.presale.views.checkout.CheckoutView.as_view(),
name='event.checkout'),
url(r'resend/$', pretix.presale.views.user.ResendLinkView.as_view(), name='event.resend_link'),
url(r'^order/(?P<order>[^/]+)/(?P<secret>[A-Za-z0-9]+)/$', pretix.presale.views.order.OrderDetails.as_view(),
name='event.order'),
url(r'^order/(?P<order>[^/]+)/(?P<secret>[A-Za-z0-9]+)/invoice$',