How create Order works ( taxes and payment method )

Ask the community
, ,
2

I don’t see any taxes information in your fullOrder.total that’s probably why taxes aren’t showing up.

1612×936 191 KB

SECURITY CONCERNS

I see several security issues in your code:

  1. The payment amount is sent from the frontend to createMyPayment: this means anyone could create a payment of 0.01€ instead of 1000€ and your system will process it.

  2. You build orders in the frontend with createOrder: that means anyone can “hack” your system to send a new order, even if they are not paid, or add items to their order after it was paid.

I highly recommend fixing those issues to avoid bad surprises.