New Zenner
- Join Date:
- Jan 2010
- Posts:
- 5
- Plugin Contributions:
- 0
Customers changing price when checking out?
I have the latest version of Zen Cart and am fully patched up. Recently I saw an order come through with GV as the payment method (we don't accept GV). The customer was contacted and were adamant that they had selected direct deposit or credit card.
My developer suspected the checkout could be vulnerable to customers using tools like firebug to change pricing/shipping amount/payment method when checking out. For example - http://www.thedigeratilife.com/blog/index.php/2006/11/30/how-to-buy-a-playstation-3-for-099/. I know this is highly unlikely as Zen Cart should have checks against this sort of thing, but can someone confirm it for me? Can a user manipulate the price that is being sent to the server?