Everybody can view orders

Everybody can view orders

Hi!

We have found a issue.

---

---

Aw: Everybody can view orders

components\com_jshopping\Controller\UserController.php

~row 360
if ($user->id!=$order->user_id){
\JSError::raiseError(500, "Error order number. You are not the owner of this order");
}

change to

if ($user->id!=$order->user_id){
\JSError::raiseError(500, "Error order number. You are not the owner of this order");
return 0;
}

-----------
Will be in new version

---

Aw: Everybody can view orders

Thank you!