Bad News! paypal specific page button bug

Hi , i have been victim of a fraud , by a malicious customer , on one of my page , using specific access ,

he simply change the price on the source code, and click on the button to get the price updated ,

i have try it myself , ( on my own website of course)

i’m quite good with coding but for this cannot find the issue

maybe change the process of specific page payment putting price between no possible to change on source code, well, please help … have to sort it out assap

regards

Hello there,

Well, are you using the shortcode? Or the HTML version? Also, do you have encryption enabled over at PayPal’s side?

– Eduan

i use the shortcode, when you say encryption enabled could you elaborate ?

and the bug manipulation is before the payment process.

let say you are on the specific page button . if you click buy it redirect you to paypal to access to the page . . .

when you are on the button page go to source code , and just find the button code … and then change the price.

then click on the button on gui page and it asked you to accept the change then redirect you to the payment page with the price updated , that very weird

Under Dashboard -› s2Member® -› PayPal® Options -› Account Details -› Enable Button Encryption? you should enable button encryption, and follow the instructions to do the same on PayPal’s side. See how that goes.

Other than that I’m not sure what else you could do.

– Eduan