View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0004452 | Taler | taler-merchant-demos | public | 2016-04-20 01:03 | 2024-01-12 13:08 |
| Reporter | Florian Dold | Assigned To | Marcello Stanisci | Resolution deadline | |
| Implementer | Reviewer | ||||
| Release signed by | Deployed by | ||||
| Verifier | Communicator | ||||
| Data protection authority notification required | No | ||||
| CSIRT notification required | No | ||||
| Estimated effort (hours) | Actual effort (hours) | 0 | |||
| Fast-track | No | ||||
| Work package | none | ||||
| Priority | normal | Severity | major | Reproducibility | have not tried |
| Status | closed | Resolution | fixed | ||
| Product Version | 0.0 | ||||
| Target Version | 0.0 | Fixed in Version | 0.0 | ||
| Summary | 0004452: merchant does not do contract restoration correctly | ||||
| Description | ... basically right now the PHP merchants don't verify that the parameters (donation receiver, amount) match the contract with the given transaction id and hash. Thus the merchant will happily generate pages like "You successfully donated 1000 KUDOS to FooBar", even though we never signed a contract mentioning FooBar or 1000 KUDOS. | ||||
| Tags | No tags attached. | ||||
| This is fixed in the Python merchant. I really don't want to touch the PHP code again ;-) | |
| to be tested with wallet | |
| fixed in af5c823 (although not mentioned in the commit message..) | |
| Date Modified | Username | Field | Change |
|---|---|---|---|
| 2016-04-20 01:03 | Florian Dold | New Issue | |
| 2016-04-20 01:03 | Florian Dold | Status | new => assigned |
| 2016-04-20 01:03 | Florian Dold | Assigned To | => Marcello Stanisci |
| 2016-04-20 01:54 | Florian Dold | Note Added: 0010529 | |
| 2016-04-22 18:54 | Marcello Stanisci | Note Added: 0010546 | |
| 2016-05-02 11:51 | Marcello Stanisci | Note Added: 0010606 | |
| 2016-05-02 11:51 | Marcello Stanisci | Status | assigned => informing |
| 2016-05-02 11:51 | Marcello Stanisci | Resolution | open => fixed |
| 2016-05-03 03:57 | Christian Grothoff | Status | informing => closed |
| 2016-05-03 03:57 | Christian Grothoff | Product Version | => 0.0 |
| 2016-05-03 03:57 | Christian Grothoff | Fixed in Version | => 0.0 |
| 2016-05-03 03:57 | Christian Grothoff | Target Version | => 0.0 |
| 2024-01-12 13:08 | Christian Grothoff | Category | merchant frontend (donations) => Merchant frontends (Python3) |
| 2026-08-23 14:16 | Florian Dold | Category | Merchant frontends (Python3) => taler-merchant-demos |