Skip to content

Commit be7a38e

Browse files
committed
AC-9313::Database record tampering
1 parent c22a9db commit be7a38e

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

app/code/Magento/Customer/Model/ResourceModel/CustomerRepository.php

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -204,6 +204,9 @@ public function save(CustomerInterface $customer, $passwordHash = null)
204204
if ($customer->getId()) {
205205
$prevCustomerData = $this->getById($customer->getId());
206206
$prevCustomerDataArr = $this->prepareCustomerData($prevCustomerData->__toArray());
207+
208+
/** customer update time change created date is not allowed */
209+
$customer->setCreatedAt($prevCustomerData->getCreatedAt());
207210
}
208211
/** @var $customer \Magento\Customer\Model\Data\Customer */
209212
$customerArr = $customer->__toArray();

0 commit comments

Comments
 (0)