Error! The Price Validation Failed

Hi check the following support thread. Someone did something similar to what you are trying to do.

It looks like that support thread does explain what I am looking to do, but it does not work for the latest version of the plugin(V4.1.0) since it added “robust price validation checks.”

As you can see from my code in the earlier post, a “hash_one” value is now required. This is generated from within wordpress-simple-paypal-shopping-cart/wp_shopping_cart.php:

$_POST['wspsc_product'] = strip_tags($_POST['wspsc_product']); //for PHP5.2 use filter_var($_POST['wspsc_product'], FILTER_SANITIZE_STRING);
        $_POST['item_number'] = strip_tags($_POST['item_number']);
        if (isset($_POST['price'])){
            $_POST['price'] = strip_tags($_POST['price']);
            //Validate price
            $hash_once_p = strip_tags($_POST['hash_one']);
            $p_key = get_option('wspsc_private_key_one');
            $hash_one_cm = md5($p_key.'|'.$_POST['price']);
            if($hash_once_p != $hash_one_cm){//Validation failed
                wp_die('Error! The price validation failed.');
            }
        }

If you comment this section out, hash_one value is not required, but clearly the price check does not work. Any thoughts on how I could generate this hash value, since I am inserting fields like “wspc_product” “price” “cartlink” and “product_tmp” through the use of generated variables within the template depending on what book is being displayed?

Hi, one of the plugin developers will investigate your issue further.

Regards

The best option for what you are trying to do would be the following:

Option 1) Use the following function in your template file to generate the button. Here is an example snippet of code:

<?php
do_shortcode('[wp_cart_button name="Test Product" price="19.95"]');
?>

Option 2) Use the add to cart shortcode of this plugin on a test page. This will generate the button with all the correct info. Then you can view the HTML source and then copy paste the HTML code and use it on your template file.

Hello, I use JavaScript to set the price, based on the selection of a drop-down box.
In this case there’s no way to pass the hash check.
So I temporarily commented out the line wp_die('Error! The price field may have been tampered. Security check failed.');
I would be grateful if you could add an option in preferences to disable the price check, in my case it would be very useful.
Thank you

Are you able to do an ajax query to the server from your JS code?

That will allow me to introduce a clean solution for you.