javascript - Stripe security issue -


i'm integrating stripe online store. can see code below, payment form inserted html values each form field. means user change price of field, , fraud.

is secure? if not, how can add security measures?

thanks! :)

<form action="" method="post">   <script     src="https://checkout.stripe.com/checkout.js" class="stripe-button"     data-key="deleted_for_demonstration"     data-amount="2000"     data-name="demo site"     data-description="2 widgets ($20.00)"     data-image="/128x128.png">   </script> </form> 

i assume using stripe.js in case wouldn't required use price in form.

i try , change code flow below...

for instance...

user selects product id 123 via post request on product page. store have selected product in session.

when checkout...

use stripe js on card details on frontend exchange form card details token.

post token server.

the webserver calculates amount based on products in session, uses mysql tables prices them submits stripe along token returned process payment.

hope makes sense...


Comments

Popular posts from this blog

angularjs - Showing an empty as first option in select tag -

qt - Change color of QGraphicsView rubber band -

c++ - Visible files in the "Projects" View of the Qt Creator IDE if using the CMake build system -