I am setting up a website for someone, and plan to use Paypal buttons. The "Button Manager API Overview" tells me about "Specifying HTML Variables", and in particular, using the merchant ID (or email address) for the "business" parameter, to identify the business. The Website owner is concerned that the Merchant ID may present a security risk by making it public, so contacted Paypal for advice. One advisor told him "The Merchant ID isn't really anything that can be used to set up your website", and another that "The Merchant ID is not an option when setting up shopping carts". So, Is the Merchant ID a security risk, or can it be used publicly instead of an email address? Can the Merchant ID be used in buttons as described, or is it deprecated, or just not preferred?
... View more