You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
First i want to say your project is awesome bro! seriously one of the best!
There is one thing i found. There is an security risk in the payment part.
The total amount to pay needs to be calculated on the server side. The way it is now you can change the total price in your localStorage and manipulate the price you need to pay.
This is something that people need to change before they will use it for a real live ecommerce shop.
maybe you can make a tutorial how to do this?
thanks!
The text was updated successfully, but these errors were encountered:
JustMark1
changed the title
Payment.jsx and payment.js in controller security risk
Payment part security risk.
Jul 11, 2023
First i want to say your project is awesome bro! seriously one of the best!
There is one thing i found. There is an security risk in the payment part.
The total amount to pay needs to be calculated on the server side. The way it is now you can change the total price in your localStorage and manipulate the price you need to pay.
This is something that people need to change before they will use it for a real live ecommerce shop.
maybe you can make a tutorial how to do this?
thanks!
The text was updated successfully, but these errors were encountered: