|
mfpweb
|
August 11, 2023 at 1:38 pm
When a participant tried to register for a workshop on our website (which uses Event Espresso and PayPal Express), pressing the Proceed to Payment button automatically forwarded her to a stranger’s PayPal account with banking information displayed, someone she did not know. She’s on her own computer with a secure WiFi. Has anyone else experienced this and know if anything can be done? PayPal thinks it is on the user end, but the participant is blaming our site since the issue occurs on our site.
|
|
Tony
|
August 12, 2023 at 4:53 am
Hi there,
Just to clarify from the beginning, the issue you are describing does NOT actually occur on your site.
With PayPal Express we build out a checkout link using details from your order and details from PayPal, once you click the button to pay and you are directed to PayPal the output of that page has nothing at all to do with your site (or EE) anymore, it’s all on PayPals servers and they determine if your are logged in, what to display etc.
It’s a similar situation to me posting a link to say Facebook here on the forum and then when you click on it, its displays ads you don’t like on the page (yes, I’m fully aware that the issue at hand is much more serious than that, but the point is we don’t have control over the output of other sites regardless of us linking to them).
For PayPal to display a stranger’s account, PayPal’s server must have considered that users request to be logged in and that’s NOT easily broken. If it were a simple case of somehow being able to create a link to PayPal with another user’s account then PayPal (and pretty much any payment processor) would not exist as every account would be hacked within minutes.
Unfortunately, I can’t tell you how this has happened but I can tell you that it’s not from Event Espresso ‘doing something’ to allow for the above, its just not how it all works.
|
