how can customer delete extra addresses from their address book?

[kayakbabe]

In the levels theme there isn't a delete link in the customer address book. How can they delete extra addresses?

I see in other themes that there are delete links in the customer address book.

[Matt Zimmermann]

When you are on CABK, there should be a red trashcan on the right side of each address. Can you post a link the the site in question?

[kayakbabe]

Matt, I can't post the link in this public forum. It is a dev site. I will PM you with the link.

[AHerb]

...../merchant.mvc?Screen=CABK&Action=DCSA&Address_ID=2732

will delete address with ID 2732

href="&mvte:urls:_self:secure_sep;Action=DCSA&Address_ID=&mvta:address:id;"

[kayakbabe]

I went and downloaded a fresh copy of the levels theme to get the current template code out of the addressbook.htm for the CABK page template.
It turns out the levels theme has the wrong code for the trash can icon. Throughout the theme the data-icons are referenced by their hex code and not by their icon name.
So...
This did not display:

<a class="red float-right icon-icon_trash" href="&mvte:urls:_self:secure_sep;Action=DCSA&amp;Address_ID=&mvta:address:id;"></a>

I inserted just the <span data-icon="&#xe019"></span> within the A tag and still it did nothing.
I actually had to insert text to make the link clickable.
I found this worked.

<a class="red float-right icon-icon_trash" href="&mvte:urls:_self:secure_sep;Action=DCSA&amp;Address_ID=&mvta:address:id;"><span data-icon="&#xe019"></span> Delete</a>

and just to make sure that the icon name doesn't start "working" I settled upon this:

<a class="red float-right" href="&mvte:urls:_self:secure_sep;Action=DCSA&amp;Address_ID=&mvta:address:id;"><span data-icon="&#xe019"></span> Delete</a>

and now I can delete from my address book in the Levels Readytheme.

I do not see any code in the template for the CSRF.
but I"ll start a new topic to ask questions about that.

[AHerb]

CSRF token you mean?
To delete the data you must be logged in, so cross site attack in this case is very... ghm... unlikely to happen

[kayakbabe]

yep that is what I meant. doesn't look like it is integrated in the levels ready theme. If it help prevent cross site attacks. I'm all for it.

[Matt Zimmermann]

The latest release of Levels, 04/19, is compatible with 9.7/8/9 and includes the CSRF token updates. https://apps.miva.com/levels-readytheme.html

[kayakbabe]

Matt, the delete on the CABK doesn't include the csrf token. without it, a customer can't delete an address from their address book.
I don't think Levels is up to date. (i even just downloaded it today 6-28-18) and it doesn't have the csrf. I put it in the link &amp;CSRF_Token=&mvta:global:Basket:csrf_token; and now I can delete addresses from my address book.

[Matt Zimmermann]

Thank you for the heads up. I will check the development site and get a new version pushed to Miva Apps.