The Huge Mistake of Paypal

Discussion in 'PayPal' started by e-fun, Jan 10, 2008.

  1. #1
    Sorry if my title was too objective.

    I don't know how to mention this. Yesterday, some of my other products was stolen from somebody who just pay only 0.01 for my killer products via Paypal.
    Seems that they can change the value of my product price.

    I think, Paypal have a big mistake here. I have use one of the most famous security of payment gateway, Warrior Download.

    So, which one that I need to contact now? The owner of Warrior Download or Paypal?

    I'm still new for this payment processing problem. I really need your advice, guys.
     
    e-fun, Jan 10, 2008 IP
  2. biohammer

    biohammer Peon

    Messages:
    59
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #2
    contact paypal immediately to let them know and ask them to analyze the links you are using. Paypal is good security wise
     
    biohammer, Jan 10, 2008 IP
  3. qardinal

    qardinal Peon

    Messages:
    333
    Likes Received:
    15
    Best Answers:
    0
    Trophy Points:
    0
    #3
    i've noticed that you can generally change the price by altering the html code, then bringing the file up in your browser. it's so simple it's stupid. you can buy anything you want through paypal for a penny.

    i've never done this though, i'm not a thief.
     
    qardinal, Jan 10, 2008 IP
  4. e-fun

    e-fun Peon

    Messages:
    210
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #4
    Good security? Are you sure?
    I asked some experts and they said that my paypal button was hacked by somebody.
    I have encrypted my paypal button before, but I still keep wondering how they can change my paypal button?

    Start now, I can't automate my "cash machine".
    I need to give my product manually to my client. How sad. :(
     
    e-fun, Jan 10, 2008 IP
  5. e-fun

    e-fun Peon

    Messages:
    210
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #5
    Really? If I make my HTML hidden, do you think it still able to hack?
     
    e-fun, Jan 10, 2008 IP
  6. Dollar

    Dollar Active Member

    Messages:
    2,598
    Likes Received:
    82
    Best Answers:
    0
    Trophy Points:
    90
    #6
    If they can even change the value of the encrypted paypal button.
    Send them a email right away and let them know.
    It probably was cracked, and there is hack floating around in the "dark corners" of the net.
     
    Dollar, Jan 10, 2008 IP
  7. eddy2099

    eddy2099 Peon

    Messages:
    8,028
    Likes Received:
    568
    Best Answers:
    0
    Trophy Points:
    0
    #7
    As long as you encrypt the buy now button, it should prevent anyone from changing the price. Also as long as you take some simple steps not to fulfill each other automatically, you can weed away any such hacks or changes in the order form as you can easily reject transactions which does not look right.

    It is not Paypal's fault that you got into this mess as the precaution are out there and it depends on whether you want to enable it or not.
     
    eddy2099, Jan 10, 2008 IP
  8. n-james

    n-james Well-Known Member

    Messages:
    1,367
    Likes Received:
    70
    Best Answers:
    0
    Trophy Points:
    165
    #8
    Its on paypals end and its the url.

    You can solve it easily by using encoded buy it now buttons.
     
    n-james, Jan 10, 2008 IP
  9. e-fun

    e-fun Peon

    Messages:
    210
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #9
    I have encrypted my paypal button. But why they still can hack it?
    Do you think I need to change my payment gateway?
     
    e-fun, Jan 10, 2008 IP
  10. Pervert-For-Life

    Pervert-For-Life Banned

    Messages:
    1,756
    Likes Received:
    63
    Best Answers:
    0
    Trophy Points:
    0
    #10
    i agree with eddy, you need to upgrade your account ot business account because business account dont show the paypal email on top. because if someone know your paypal email, then they can use a cracker to crack the password.. it dont need to send a fake login to you or email.... all they have to do is get the email.. but business account email is easy to get if the button is not encrypted.... so these are the two steps that stop a cracker from cracking your paypal account... also always check the paypal URL on your browser before you login... and dont download any photo from any girls... as now a days i have seen that many people are keylogged by photo... it is so easy... there are binders that bind a virus with a picture.. and when you open the picture thinking its a hot girl, you get keylogged... and once you get keylogged you know what happens.... so keep my advice in mind...and i guarentee you, you will be safe... but i cannot guarantee you about paypal as paypal love limiting accounts now a days lololol....
     
    Pervert-For-Life, Jan 11, 2008 IP
  11. buileminh

    buileminh Peon

    Messages:
    503
    Likes Received:
    3
    Best Answers:
    0
    Trophy Points:
    0
    #11
    If your PP button was hacked even it was encrypted, please contact PayPal urgently because the hacker can do it to all other paypal buttons.
     
    buileminh, Jan 11, 2008 IP
  12. abudhar

    abudhar Banned

    Messages:
    53
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #12
    hackers these days are really getting on...everywhere in the news, its abt hackers !
    man !
     
    abudhar, Jan 11, 2008 IP
  13. Pervert-For-Life

    Pervert-For-Life Banned

    Messages:
    1,756
    Likes Received:
    63
    Best Answers:
    0
    Trophy Points:
    0
    #13
    they are losers who have nothing better to do but causing trouble and pain around... they are some useless peoples who cant get a job and so they sit on the computer 24/7 to do bad things to peoples...
     
    Pervert-For-Life, Jan 11, 2008 IP
  14. buileminh

    buileminh Peon

    Messages:
    503
    Likes Received:
    3
    Best Answers:
    0
    Trophy Points:
    0
    #14
    You are right but I think we are here to help the man resolve his problem :)
     
    buileminh, Jan 11, 2008 IP
  15. qardinal

    qardinal Peon

    Messages:
    333
    Likes Received:
    15
    Best Answers:
    0
    Trophy Points:
    0
    #15
    best thing to do is use a paypal merchant account for accepting payments.

    it doesn't matter whether or not the seller is able to prevent this type of theft through simple encryption/security measures, no online payment processor worth a dime would allow their service to be so easily superceded, or even allow anything to go live that can be defeated by someone with a browser and notepad. summary: paypal sucks.
     
    qardinal, Jan 11, 2008 IP
  16. e-fun

    e-fun Peon

    Messages:
    210
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #16
    Ok, report send to Paypal.
    Will update this thread later.

    Anybody who have recommended payment security (software/script), please share it here, so all of us can get the better solution for it.

    Thanks to all of your opinion.
     
    e-fun, Jan 11, 2008 IP
  17. pikemanqn

    pikemanqn Guest

    Messages:
    246
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #17
    I suggest to use .htaccess
     
    pikemanqn, Jan 11, 2008 IP
  18. fizfaz

    fizfaz Well-Known Member

    Messages:
    334
    Likes Received:
    7
    Best Answers:
    0
    Trophy Points:
    108
    #18
    Any update about this..

    How about dlguard. I heard good about them but never use it before..
     
    fizfaz, Feb 23, 2008 IP