Nadia Krawczyk
Nadia Krawczyk

Reputation: 119

Paypal custom data - safety issue

I've got paypal recurring payment buttons on my website.

I'm passing subscription type and user id through custom data.

It's reversed and base64 coded. But still someone can edit it and change subscription type or/and user id. Am I right?

Should i check payment amount and then verify type or what...

Is custom data field in paypal button safe to work with?

Upvotes: 0

Views: 77

Answers (1)

RichieHindle
RichieHindle

Reputation: 281505

You should encrypt your payment buttons - see Securing Your PayPal Payments Standard Buttons.

Upvotes: 1

Related Questions