Currently the links used to get to the Global Payments form to fill out the required Credit Card details aren't checked if they're used already and expire after the (default temp-store) period of 7 days.
This could lead to abuse.

Attached patch expires links after 7 minutes and invalidates them once they're used.

CommentFileSizeAuthor
#2 3149788-2.patch38.88 KBspokje

Comments

Spokje created an issue. See original summary.

spokje’s picture

StatusFileSize
new38.88 KB
ikit-claw’s picture

Status: Needs review » Fixed

This should be fixed on dev now. Will give it a few weeks before doing a full release.

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.