javascript - How to post "amount" variable in a Braintree JS secure custom form? -


is possible send amount @ same time payment form when using braintree? braintree guide explicitly says:

"make sure don't include name attributes in form elements. if form accidentally submitted , name attributes present, sensitive data can reach server."

so if using simple implementation in html:

<form id="checkout" action="/your/server/endpoint" method="post">    <input data-braintree-name="number" value="4111111111111111">    <input data-braintree-name="expiration_date" value="10/20">    <input type="submit" id="submit" value="pay"> </form>

and python endpoint looks this:

@app.route('/payment', methods=['post']) #@cross_origin() def do_payment():  nonce = request.form["payment_method_nonce"] result = braintree.transaction.sale({ "amount": amount, "payment_method_nonce":nonce, "options": {     "submit_for_settlement": true     } })

`

is possible send amount in post without messing encryption credit card information ? or need implement second ajax callback post , persist somehow in python backend or implement som kind of sessions handling in flask ?

what alternatives , best practice ? fyi: works (if setting amount static "10" instance, thing missing amount variable in backend since can't send using payment form submit.

i work @ braintree. if have more questions, suggest reach out our support team.

it looks you're using cse, deprecated integration method. recommend follow braintree docs , use v.zero instead.

if put amount in form, user can change value whatever want. isn't intended behavior, don't want amount part of form. instead, include hidden field identifier item they're purchasing, or that.

the recommendation not use name on form fields applies fields sensitive information you're intending encrypt. it's fine include name on fields don't contain sensitive data.


Comments

Post a Comment

Popular posts from this blog

java - Spring Data JPA: Why findOne(id) executing delete query internally? -

i have 1 application using @manytomany annotation link 2 different entities 1 parent entity. not sure if have implemented properly. when execute .findone() on parent entity's repository find it, @ first fetch data along executing delete queries internally delete record mapping table (a table jpa creates after adding @manytomany annotation.). following generated sql queries , code snippet: java class @entity @table(name = "inventory") public class inventory { @id long id; // many other properties @manytomany(fetch=fetchtype.lazy) private list<stream> streams; @manytomany(fetch=fetchtype.lazy) private list<subject> subjects; } there no other annotation i've put in stream , subject entity class link inventory class. when run app, create following tables: inventory stream subject inventory_stream inventory_subject (inventory_stream , inventory_subject, 2 tables created automatically, don't k...
Read more

python - Mongodb How to add addtional information when aggregating? -

i beginner , wrote line pipeline works, wanna add other information output, screen name , or number of tweets.i tried add under $group gave me syntax error everytime here pipeline: def make_pipeline(): # complete aggregation pipeline pipeline = [ { '$match': { "user.statuses_count": {"$gt":99 }, "user.time_zone": "brasilia" } }, { "$group": { "_id": "$user.id", "followers": { "$max": "$user.followers_count" } } }, { "$sort": { "followers": -1 } }, { "$limit" : 1 } ]; i using on example : { "_id" : objectid("5304e2e3cc9e684aa98bef97"), "text" : "first week of school on :p", "in_reply_to_status_id" : null, "retweet_count" : null, ...
Read more

java - Incorrect order of records in M-M relationship in hibernate -

Image
i have 4 records in bridge table in mysql database. using @manytomany in hibernate, accurate order of employees incorrect incorrect of projects. following required material figure out doing mistake. this source. @entity @table(name="project") public class projectbean { @id @generatedvalue @column(name="project_id") private int projectid; @column(name="title") private string projecttitle; @manytomany(mappedby="projects") private collection<employeebean> employees; public projectbean() { employees = new arraylist<employeebean>(); } //getters & setters } @entity @table(name="employee") public class employeebean { @id @generatedvalue @column(name="employee_id") private int employee_id; @column(name="first_name") private string ...
Read more