- This topic has 3 replies, 3 voices, and was last updated 13 years, 1 month ago by
.
-
Posts
-
For security purposes, my PayPal website options are set with the “Block Non-encrypted Website Payment” on — which requires that any PayPal button used on my site must be set as encrypted.
Another plugin that I am using on the site includes an option to create encrypted PayPal buttons. Is this possible currently with WP eStore? If so, how can I do it?
If it is not possible to encrypt WP eStore PayPal buttons, I will need to turn off the option on my PayPal account, which I would rather not do.
Thanks much.
The purpose of having encrypted PayPal buttons is to prevent spoofing of transactions.
Under this system, transactions are blindly submitted, without any further verification checks.
eStore uses PayPal’s IPN feature to verify the integrity of all submitted transactions, the use of encrypted buttons is not necessary.
https://support.tipsandtricks-hq.com/forums/topic/security-vulnerability
In fact, because eStore verifies the transaction’s integrity, after it is submitted to PayPal; this is considered a better business practice than blindly relying on a single encrypted transaction submital, without verification.
Basically, when you use eStore, you don’t have to worry about your button security (all these are taken care of for you). More details about this here:
http://www.tipsandtricks-hq.com/ecommerce/wordpress-ecommerce-knowledgebase-523
You can’t use encrypted buttons when you are submitting item information from a cart. This is the same for all cart plugins (not just eStore).
The point of security is to manage risk. The risk we are managing is… “that someone will try to get a five finger discount.”
PayPal provides two independent methods for preventing this; encrypted buttons and IPN. With eStore, we have chosen the IPN method, because it provides a verifiable way to ensure the proper transaction took place. To implement both would be redundant; because in the end, the IPN verification takes precedence over whatever was transmitted to PayPal.
- You must be logged in to reply to this topic.