Loaded Commerce Community

I understand that there is a vulnerabilty in the 6.3/6.4.0 admin system (fixed in 6.4.1a) that can give people access to the admin system. The bug is identified by trying to access admin/orders.php/login.php if you don't see the login screen, aparently you have a problem.

I understand that there is a fix available, which is not too complex to implement.

I have one client on 6.3 who does not pay for support or want an upgrade, but I would like to fix this if it is not too complex.

Can anyone give me details of the fix?

Thanks

Sure: http://www.codemehappy.com/2010/10/admi ... sed-carts/

Simon