ecartz wrote: ↑Fri Oct 24, 2025 7:22 pmNo. You're missing the point. They're not logged in (part of the situation as described). How do we know which client's order needs to be cancelled?
Yes, I understood wrong here:
Vaddalapam wrote: ↑Fri Oct 24, 2025 1:09 pmAvoid implementing it exclusively in the customer login area.
I understood outside the account area, but the user to be logged in.
For not logged in users, the cancel button in the footer area doesn't make sense to me. The only action it could perform is to link to the login form.
ecartz wrote: ↑Fri Oct 24, 2025 8:09 pm
PwA can require the customer to enter their username (email address) and order ID to perform the cancellation.
When the consumer clicks on the withdrawal button, they must be redirected to a page where they can enter their name, the contract they wish to withdraw from, and their contact details in a structured form.
contract: order ID
contact details: email address
I'm not sure if cancelling the order with order ID and E-mail address only is enough to protect from unauthorized use and compliant with data protection laws.
I thought I could add a link into the guest order confirmation mail which links to a new guest order page (instead of account_history_info.php). The access would be protected by the guest order token (included as a link parameter). The same is already used to link to the guest write review page. It would be anyway good to have this guest order page even without the cancel order possibility.
In addition a direct link to cancel the order can be added to the order mail. Also protected with the guest order token as a link parameter.
Thoughts?