Well.
Turns out this number here...Is all you need to spoof this link:
That link only shows up on some CBD oils, perhaps because their regulations relaxed recently. I think they're now available to anyone that can hold a conversation with a pharmacist, which would automatically include everyone with a cannabis doctor they talk to on here.
I usually buy from another page which has just what I'm supposed to buy on it.
Method
I can go to, say, this product I'm prescribed but not able to buy because it's technically a different product, with a discount applied due to oldness. Obviously that needs separating.
I look for this in the html head:
<link rel="alternate" title="JSON" type="application/json" href="https://cannabisclinic.co.nz/wp-json/wp/v2/product/201233">
I put that into this:
?add-to-cart=201233
And pop that on the end of any url!
UNLESS, your product has a "I declare I have read and understand all the terms and conditions" checkbox...
We'll have to tick that and add a button to the form it's in:
<button type="submit" name="add-to-cart" value="201233" class="single_add_to_cart_button button alt">Nab</button>
It otherwise presents itself as not where to get stuff.
All this surely gets double checked so...
No comments:
Post a Comment