Odd Security Warning Bug

Message Topic Search Topic Options Post Reply Create New Topic Printable Version Translate Topic

   Ok this is an odd bug, and I don't think it is a real security issue at all.  Here is how it got triggered.  Customer placed an order online with paypal, shipping cost was less, so we refunded his paypal account, and then adjusted the invoice.  Next I get an email from the store with the title "Security Warning" and the body says:
"Store administrator,
Someone has submit PayPal payment lower than the total value of the 
shopping cart. This may indicate a fraudulent attempt to purchase goods 

below their value.  Please review order 278803 and its corresponding 
PayPal receipt for problems. "
I have seen these messages before, but never really paid attention.  Go figure.  LOL  Thought I throw this out for a possible fix with future updates. 
Thinking about this, could be a security feature to prevent empoyees from messing with purchases placed by friends.  I can see an electronics store wanting this.  Then you definetely want this message.  Perhaps a better text?
Katharina

Author	Message Topic Search Topic Options Post Reply Create New Topic Printable Version Translate Topic
katharina Members Profile Send Private Message Find Members Posts Add to Buddy List Senior Member Joined: 25-October-2005 Location: United States Status: Offline Points: 0	Post Options Post Reply Quote katharina Report Post Thanks(0) Quote Reply Topic: Odd Security Warning Bug Posted: 11-June-2009 at 9:28pm
	Ok this is an odd bug, and I don't think it is a real security issue at all. Here is how it got triggered. Customer placed an order online with paypal, shipping cost was less, so we refunded his paypal account, and then adjusted the invoice. Next I get an email from the store with the title "Security Warning" and the body says: "Store administrator, Someone has submit PayPal payment lower than the total value of the shopping cart. This may indicate a fraudulent attempt to purchase goods below their value. Please review order 278803 and its corresponding PayPal receipt for problems. " I have seen these messages before, but never really paid attention. Go figure. LOL Thought I throw this out for a possible fix with future updates. Thinking about this, could be a security feature to prevent empoyees from messing with purchases placed by friends. I can see an electronics store wanting this. Then you definetely want this message. Perhaps a better text? Katharina
	Katharina ***************** www.GermanPlaza.com *****************

Hamish Members Profile Send Private Message Find Members Posts Add to Buddy List Admin Group Joined: 12-October-2006 Location: United Kingdom Status: Offline Points: 56	Post Options Post Reply Quote Hamish Report Post Thanks(0) Quote Reply Posted: 11-June-2009 at 9:41pm
	Hi Katharina, It's a security feature, not a bug.
	Editing ProductCart Code? See WIKI Guidelines for Editing ProductCart's ASP Source Code