• Resolved MickFrench

    (@mickfrench)


    Bonjour,

    Someone found a way to change the value of the amount (0 instead of 3€) using CTRL+MAJ+I with Chrome.
    Is there a way to hide or protect the amount?

    Thank you

    Regards

    Mick

    PS: I can send you a capture of this issue

    The page I need help with: [log in to see the link]

Viewing 14 replies - 1 through 14 (of 14 total)
  • Thread Starter MickFrench

    (@mickfrench)

    here is the code
    <div class=”Section-button”>
    <button type=”submit” class=”Button-animationWrapper-child–primary Button”><span><div class=”Button-content”><span>
    <!– react-text: 116 –>Payer <!– /react-text –>
    <span><span>3,00 €</span></span></span></div></span></button></div>

    Plugin Support mbrsolution

    (@mbrsolution)

    Hi, I don’t think that is possible. I tried it myself and I can’t changed the 3,00 euro value. Are you sure about this yourself? Have you tried to change the value in Google Chrome?

    Regards

    Thread Starter MickFrench

    (@mickfrench)

    Hi,
    I’ve tried with:
    – Firefox (64.0 Firefox Release December 11, 2018)
    – Google Chrome portable (Version 70.0.3538.77 (Build officiel) (32 bits))
    I can change the value for both, I just unfold the code at <div class=”section-button”> (see above my second post).
    I can send a screen capture if it helps ? (let me know how)

    Regards

    Mick

    Plugin Support mbrsolution

    (@mbrsolution)

    Hi, click on my name and use the contact form in my site.

    Thank you

    Plugin Contributor Alexander C.

    (@alexanderfoxc)

    Hi.

    You can change amount this way indeed. But you only change the way its displayed. You can change zero to 1,000,000 and you still be paying 3 EUR like it is configured on your website.

    Try yourself. Switch it to the test mode, change amount to 0 and make test payment using test credit card: 4242 4242 4242 4242 11/22 123. Then have a look how much you were charged ??

    Thread Starter MickFrench

    (@mickfrench)

    Hi,
    Thanks for your reply.
    You’re certainly right in test mode.
    But in live mode, look at what I’ve received after the “order” of the guy:

    “Cher vendeur (means: Dear seller)
    Nous vous informons de cette vente (means: we inform you of this sale)
    Product Name: 396 accords
    Quantity: 1
    Item Price: 0€
    ——————————–
    Total Amount: 0€

    Download link: https://guitare.mg-records.com/wp-content/uploads/&#8230;./……….pdf

    Order Info: https://guitare.mg-records.com/wp-admin/post.php?post=…&#8230;.amp;action=edit

    cette commande a été réglée par (means: this order was paid by )louis…[email protected]

    Merci”

    As you see the guy got the download link for 0€…
    The order is on my Stripe payments wp dashboard and also registred into my Stripe account…

    Thank you
    Regards
    Mick

    • This reply was modified 6 years, 2 months ago by MickFrench.
    Plugin Contributor Alexander C.

    (@alexanderfoxc)

    Looks like he was using different method to trick the system. I will investigate this further and let you know the results.

    As a workaround, create a product and use its shortcode to display payment button. For products, item price is checked against database and if amount paid mismatches price set for the product, he won’t get the download link.

    You can enable “Show Button Only” option on the product edit page and have payment button displayed alone without any product info (like it is now on your site when you use payment shortcode).

    • This reply was modified 6 years, 2 months ago by Alexander C..
    Thread Starter MickFrench

    (@mickfrench)

    Thank you,
    I’m gonna try Create a product, if it is the best solution.
    Adding a shortcode is more easy, this is why I’m using the plugin…
    I will see…
    Regards
    Mick

    Thread Starter MickFrench

    (@mickfrench)

    OK, I’ve tried Create a product, change the value ot the item 3€ to 0€ (using Ctrl+Maj+I).
    Pay the order with my own credit card and here’s what is displayed:
    Product Name: Memento 396 accords
    Quantity: 1
    Item Price: €3
    ——————————–
    Total Amount: €3

    It means that the price is 3€ whenever if it’s displayed 0€.
    Seems to work fine!

    I see that it’s better to use this code:
    -[asp_product id=”24xx”] than
    -[accept_stripe_payment name=”396 accords” price=”3.00″ url=”https://guitare.mg-records.com/&#8230;.pdf” button_text=”Acheter” class=”my-super-cool-button” item_logo=”https://guitare.mg-records.com/wp-content/&#8230;.png” description=”Boutique sécurisée par STRIPE” ]

    Thank you for your help.

    Let me know if there’s a solution working with the code
    [accept_stripe_payment name=”396 accords” price=”3.00″,
    because I may have a lot of items to change.

    Regards
    Mick

    Plugin Contributor Alexander C.

    (@alexanderfoxc)

    Hi Mick.

    I have researched this more thoroughly and found a way how someone can trick button shortcode (not product shortcode). It’s much more complicated than the method you explained, but indeed there is a flaw that lets people pay nothing.

    We gonna release a new version of the plugin that fixes this.

    Thank you for bringing this up.

    Thread Starter MickFrench

    (@mickfrench)

    Hi Alexander,

    So I will wait for the new version ’cause I like your plugin ??

    Thanks for your support
    Mick

    Plugin Support mbrsolution

    (@mbrsolution)

    Hi Mick, have you tested the latest version? Can you confirm whether it is working or not for you.

    Thank you

    Thread Starter MickFrench

    (@mickfrench)

    Hi Manuel,

    I’ve just tested the latest version with WP 5.0.3 and Google Chrome portable (Version 70.0.3538.77 (Build officiel) (32 bits)).
    Even if we write 0 amount it charges the right amount.

    It works fine.
    Thanks a lot

    Great plugin and great team!

    Mick

    PS: I’m a fan of your Tips & Tricks plugins:
    https-redirection
    Paypal donations
    Stripe Payments
    simple paypal shopping cart
    they run on about 20 wp websites.
    Bravo

    Thread Starter MickFrench

    (@mickfrench)

    Resolved ??

Viewing 14 replies - 1 through 14 (of 14 total)
  • The topic ‘Change the amount with CTRL+MAJ+I’ is closed to new replies.