Security query with Bluevoda pay pal buttons.

[Collectors-info]

Hi, I was just curious to know that if a VH member sets up an auto download from their site for lets say images or files that they are selling.
It seems that a visitor can take the pay pal html code of the page & change the pay pal amount to what ever they want with the BV PP buttons. Is there a way to make this more secure? Or am I not seeing the whole picture.

Cheers.

[navaldesign]

Re: Security query with Bluevoda pay pal buttons.

Yes, that's true. Ypu have two options for this:

1. Use PayPals encrypted buttons, not the BV ones that are NON encrypted.

2. Use a Instant Download script, which is a mini cart. It allowes for items to be added in the cart, then the user is taken to PayPal. Upon return to the site, the script compares the order value with the one stored in the database, and also checks, directly with PayPal, the rest of the details (if the payment is complete or through an e-checque, if the currency is the same, if the order nr is the same etc) and if yes, it will take the user to the download page. Last installations: http://www.anxietynomore.co.uk/the_book.html for the E-book and

http://www.golfmindplay.com/ebook.html though no products are yet loaded in this one.