diff options
| author | ivan <ivan> | 2007-11-29 02:54:51 +0000 |
|---|---|---|
| committer | ivan <ivan> | 2007-11-29 02:54:51 +0000 |
| commit | 7ed55804735f4f687cd64139db7bae9746282a89 (patch) | |
| tree | 484809ce09617af31806b61c63574a90535a5f62 /httemplate/misc/process/payment.cgi | |
| parent | 5e5da406c19d7674e3ae959a5a772aa9d2339d0a (diff) | |
even more reliable multiple-payment/double-click/concurrent-payment-form protection
Diffstat (limited to 'httemplate/misc/process/payment.cgi')
| -rw-r--r-- | httemplate/misc/process/payment.cgi | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/httemplate/misc/process/payment.cgi b/httemplate/misc/process/payment.cgi index 71a4891cf..889670d12 100644 --- a/httemplate/misc/process/payment.cgi +++ b/httemplate/misc/process/payment.cgi @@ -56,6 +56,10 @@ $cgi->param('payunique') =~ /^([\w \!\@\#\$\%\&\(\)\-\+\;\:\'\"\,\.\?\/\=]*)$/ or errorpage(gettext('illegal_text'). " payunique: ". $cgi->param('payunique')); my $payunique = $1; +$cgi->param('balance') =~ /^\s*(\-?\s*\d*(\.\d\d)?)\s*$/ + or errorpage("illegal balance"); +my $balance = $1; + my $payinfo; my $paycvv = ''; if ( $payby eq 'CHEK' ) { @@ -125,6 +129,7 @@ if ( $cgi->param('batch') ) { $error = $cust_main->realtime_bop( $FS::payby::payby2bop{$payby}, $amount, 'quiet' => 1, 'manual' => 1, + 'balance' => $balance, 'payinfo' => $payinfo, 'paydate' => "$year-$month-01", 'payname' => $payname, |