ACP2E-3233: Admin can still place order even without payment method

Chhandak.Barua · Chhandak.Barua · commit 41f6f3214f22 · 2024-10-01T20:53:33.000+05:30
diff --git a/app/code/Magento/Sales/Controller/Adminhtml/Order/Create/Save.php b/app/code/Magento/Sales/Controller/Adminhtml/Order/Create/Save.php
@@ -45,7 +45,7 @@ public function execute()
                 $this->_getOrderCreateModel()->setPaymentData($paymentData);
                 $this->_getOrderCreateModel()->getQuote()->getPayment()->addData($paymentData);
             }
-            else {
+            elseif ($this->getRequest()->isPost()) {
                 $paymentData = array('method' => '');
                 $this->_getOrderCreateModel()->getQuote()->getPayment()->addData($paymentData);
             }

Original file line number	Diff line number	Diff line change
`@@ -45,7 +45,7 @@ public function execute()`
`45`	`45`	`$this->_getOrderCreateModel()->setPaymentData($paymentData);`
`46`	`46`	`$this->_getOrderCreateModel()->getQuote()->getPayment()->addData($paymentData);`
`47`	`47`	`}`
`48`		`- else {`
	`48`	`+ elseif ($this->getRequest()->isPost()) {`
`49`	`49`	`$paymentData = array('method' => '');`
`50`	`50`	`$this->_getOrderCreateModel()->getQuote()->getPayment()->addData($paymentData);`
`51`	`51`	`}`