Access for $0.01 through a $40 button error

My site is http://devpress.com/
I’m using the latest framework and pro plugin.
The PayPal button code is in the template file. It’s not a short code.

Someone was able to gain access for $0.01. I have no trial period and there’s only one page to sign up for membership — the front page.

I’ve generated the Paypal button once again to make sure. Please check http://devpress.com and test the sign up process without going through with the payment to see if there’s anything wrong with it.

The only change to my site recently is the addition of s2Member pro plugin, about 2 to 3 days ago.

Hello Tung,

Could you please answer these questions:

Are you using the PHP/HTML version of the button? Or the shortcode version?

Do you have encryption enabled? You can enable it under Dashboard -› s2Member® -› PayPal® Options -› Account Details -› Enable Button Encryption?.

– Eduan

I’m using PHP/HTML. Buttons aren’t encrypted. When encrypted, will I be able to customize the button like I have on the front page?

Sorry. nvm my stupid question. Read the encryption and it says for PayPal button shortcodes only.

Yes I’m afraid that’s the case. :/
However, don’t worry so much, not many users (from what I know) actually are able enough to modify unencrypted HTML and such. :)

– Eduan