Hi,
This is quite a major issue... Again, after installing 3.90, I see that customers can gain access to the serial number database for free, and get as many serial numbers as they want for download products. All you have to do is add a download product with serial numbers to your cart, put in bad credit card data, or select the PayPal option, go to the PayPal page, and hit back, and the cart summary starts listing all your serial numbers.... I got over 10 numbers to show there! Plus there are these issues: When there are no serial numbers left, the system will still let you purchase the product.
Also, during the same type of test, inventory for a product is depleted. So if you keep opening the PayPal screen, your inventory is depleted even though there is no sale.
I really hope you all can get this fixed as soon as possible.... As it is now, download carts can have product serial numbers exposed without a purchase.
To solve this, I would think simply checking to make sure there are serial numbers available, and inventory available, should be fine BEFORE the purchase, then after a SUCCESS only, do you grab the serial number, or deplete inventory.
Is the above being looked at? We are in a hold and can't sell any download products until this is fixed.
Let me know if I should email anyone with additional info, or a test link to our cart.
Steve