FluentCart's autologin option
Does this auto-login feature work only for the first purchase made with a specific customer/email (good), or does it work after every purchase made using that customer's email address (potentially dangerous)?
The first case seems perfectly fine: when the customer account is initially created, automatically logging them in provides a smooth onboarding experience.
However, if auto-login happens after every purchase, there could be a security risk. For example, a malicious user could place a fraudulent order using someone else's email address to get access to all their purchases, change pass, etc. If FluentCart then automatically logs that browser into the existing customer's account simply because the checkout email matches, the attacker could potentially gain access to that customer's account.
So ideally, auto-login should only happen when the account is first created, not whenever an existing customer's email is used for a new purchase.
Can someone confirm this?
Thank you!
you are on fire 😀🔥
thanks you for your ideas 👍
Dragan STAMENKOVIC Thank you: and likewise, mate! Congrats on your recent add-on updates 👏
Honestly, FC feels like such a great opportunity for the whole add-on ecosystem.
That said, I really hope a lot of this feedback eventually makes its way into the core as well 😀 I’m genuinely impressed by how flexible FluentCart!
Jorge de los Reyes FluentCart is absolutely amazing! I completely agree about the flexibility. I think all the "standard" features will eventually make their way into the core. We shouldn't forget that FluentCart is still very new; in fact, it’s celebrating its first anniversary in a few days. When I look at what’s been achieved in just one year, it’s truly exceptional. I believe they have everything to gain by staying on this path and opening up to collaboration with third-party developers who can leverage FluentCart’s expertise to create their own extensions. That is certainly the approach I’m taking with my own work. On the other hand, I think that if they try to do absolutely everything themselves, that’s where FluentCart will lose its way. It shouldn't turn into an overly complex, bloated system like WooCommerce or similar solutions. I think the best move is for FluentCart to stick to its core business: deploying online stores and handling all the associated management tasks. I’d also like to take this opportunity to thank you for your support and for everything you share with the community your contributions are always incredibly relevant 👍
Dragan STAMENKOVIC Completely agree!
That balance is probably the key. There’s also a real race against the clock now around tax, invoices/receipts and e-invoicing before 2027. Once the compliance connectors and invoice vs receipt workflows are fully clear, I think there’ll be a huge window for adoption (especially if marketing pushes at the right time).
A lot of EU businesses will soon be pushed towards accounting/compliance SaaS ecosystems again, often increasingly consolidated under the same groups. FluentCart could become a fantastic native, self-sovereign alternative (not only for eCommerce, but also to avoid unnecessary SaaS lock-in around invoicing and compliance).
And compliance really is rule #1 in EU B2B software decisions. Small misunderstandings can create very real risks, and once businesses commit to a reporting/compliance system, switching is rarely trivial.
From what I know, the team is doing a Herculean job to hit these deadlines, so I’m sure there are plenty of surprises coming this Q4😄 FluentCart is definitely my #1 choice for anyone looking for something native, flexible and highly configurable.
And in the AI era, that matters even more: the way they’ve built things to be so understandable and extensible for AI feels genuinely ahead of its time.
And thank you very much for the kind words, mate: really appreciated! I’m always happy if anything I share helps the community 👍
Only the first purchase and if the account is created via that purchase.
Shahjahan Jewel Perfect setting then. Thank you Jewel! 😃