BTC tx is unconfirmed but download is opened for purchaser

  • Resolved ethereumicoio

    (@ethereumicoio)


    5 years, 8 months ago

    In Order notes the last record is:

    Bitcoin Payment Received
    X.XXXXXX BTC (~ XXXXX USD)
    Payment id 27 / order page
    Awaiting network confirmation…

    the mentioned tx status is unconfirmed, but the download file of the purchased Downloadable product is already awailable for the purchaser to download.

    Expected behaviour: user can not download file until 6+ tx confirmations.

    Is there some settings to configure that?

    The page I need help with: [log in to see the link]

Viewing 4 replies - 1 through 4 (of 4 total)

  • Confirmed means added to the bitcoin blockchain by the miners, the only way you wont get your bitcoin is if someone has worked out out to do a double spend. which is not likely.

    Thread Starter ethereumicoio

    (@ethereumicoio)

    It is an exact my concern. It is very easy to foolish this plugin:
    1. send BTC tx with very low tx fee, so, it would not be mined for hours or even days
    2. obtain product in a market
    3. send double spend tx to your own address.

    The unswer that it is not likely just not works. criminal people can exploit that with this plugin. It is defenetely a serious security problem.

    Plugin Author gourl

    (@gourl)

    Remove tickbox in WooCommerce “Grant access to downloadable products after payment”
    Info – https://docs.woocommerce.com/document/digital-downloadable-product-handling/

    On GoUrl WooCommerce Settings page use “Payment Confirmed” with status “Completed” only
    Screenshot – https://gourl.io/images/woocommerce/screenshot-1.png

    Tick the Grant access to downloadable products after payment checkbox if you wish to grant access to files when orders are Processing, instead of Completed.

    Thread Starter ethereumicoio

    (@ethereumicoio)

    Wow! Very helpful.
    Thank you very much!

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘BTC tx is unconfirmed but download is opened for purchaser’ is closed to new replies.