Just clinet side code secure ?

[daslicht]

Hi,

I saw this ReST example here:

https://developer.paypal.com/demo/checkout/#/pattern/confirm

It totally relies on teh client side code.

How to get sure that a user not just change the total amount without server side validation before executing the payment?

Someone suggested me just to call my server just before calling  actions.payment.execute() but that doesnt seam to be safe either.

The user could just remove that validation call cleint side?! 

Is there a way to enable origin checking on paypal ?

Best Regards

Marc

[daslicht · Accepted solution]

Short answer, no. 

Anyone who knows how to edit clinet side code can change the price to his/her liking.