Re: Re: Re: Authorize.net (SIM) payment method

drupal_newbie's picture
Offline
Joined: 11/25/2010
Juice: 38
Re: Re: Re: Authorize.net (SIM) payment method

Looks like the code is not authenticating the relay response from authorize.net using the x_MD5_Hash provided by authorize.net. Is it safe to not validate that? Couldn't someone craft a response back to server as valid payment without actually entering any CC info at authorize.net?

Thanks

Authorize.net (SIM) payment method By: Tanjerine (72 replies) Fri, 06/06/2008 - 07:14