You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
As stated in the docs, this will be a controller action that will do whatever, mainly, changing PaymentInstruction status from pending to success.
My question is: how can I avoid the user from calling http://example.com/order/4/approve himself and thus approve his order without paying? As far as I know I don't have anything that relates my order with Paypal return token.
The text was updated successfully, but these errors were encountered:
I have the same question. Doing it manually is quite simple using PayPal API (get the transaction using the token and check the result against PayPal).
When paying with Paypal, after returning from offsite payment, as configured in
return_url
Paypal redirects user to an URL in the form:http://example.com/order/4/approve?token=EC-1YB78xxxxxxxx&PayerID=GUxxxxxx
As stated in the docs, this will be a controller action that will do whatever, mainly, changing
PaymentInstruction
status frompending
tosuccess
.My question is: how can I avoid the user from calling
http://example.com/order/4/approve
himself and thus approve his order without paying? As far as I know I don't have anything that relates my order with Paypal return token.The text was updated successfully, but these errors were encountered: