VERY INSECURE | WordPress.org

Resolved allan_K
(@allan_k)

10 years, 6 months ago

There is no transaction authentication for gateway notification!

https://wordpress.org/plugins/woocommerce-payment-gateway-dragonpay/

Viewing 5 replies - 1 through 5 (of 5 total)

Plugin Author Dennis Paler
(@akosidencio)

10 years, 6 months ago

Sorry, I did not include the transaction notification from payment gateway functions since I don’t have an actual dragonpay account for now.Cannot test!

danielb827
(@danielb827)

10 years, 5 months ago

Hello Dennis,
I have downloaded this plugin and installed and I received the test merchant ID.
Dragonpay is asking me for postback/return URL for this plugin. Any advise?

Plugin Author Dennis Paler
(@akosidencio)

10 years, 3 months ago

your postback/return url should be http://website.com/?wc-api=WC_Dragonpay_Gateway

ghost027
(@ghost027)

9 years, 11 months ago

http://{website}/?wc-api=WC_Dragonpay_Gateway does not work for me.

Thread Starter allan_K
(@allan_k)

9 years, 11 months ago

How this issue could be tagged as “resolved” since any woocommerce order can be passed as paid by abuser/hacker:

“There is no transaction authentication for gateway notification!””

??

Viewing 5 replies - 1 through 5 (of 5 total)

The topic ‘VERY INSECURE’ is closed to new replies.

5 replies
4 participants
Last reply from: allan_K
Last activity: 9 years, 11 months ago
Status: resolved