Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add warning when changing course cost or currency #35

Open
harunaka11037 opened this issue Sep 13, 2020 · 0 comments
Open

Add warning when changing course cost or currency #35

harunaka11037 opened this issue Sep 13, 2020 · 0 comments

Comments

@harunaka11037
Copy link
Collaborator

harunaka11037 commented Sep 13, 2020

Changing the course cost or currency while a student is making a purchase can result in the transaction taking place but the student not being enrolled. This is because the IPN listener checks for inconsistencies in the transaction cost/currency and the current set cost/currency. This is done to thwart malicious users from tricking the plugin with a self-crafted transaction that has different values for cost/currency.

There is a window between the user loading the purchase.php page and the IPN being processed, in which changing the cost/currency can cause a false negative.

Have text in course_settings.php and paymentgateway_paypal settings warning admin to turn off the plugin first.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant