thephpleague / omnipay-paypal

PayPal driver for the Omnipay PHP payment processing library
MIT License
295 stars 174 forks source link

[BUG] Wrong shipping data from CreditCard. FRAUD door. #185

Open mendicm opened 6 years ago

mendicm commented 6 years ago

ExpressAuthorizeRequest.php:160 is sending billing data from card instead of shipping data. This is an open door to fraud if you don't notice this bug because the client can demand a refund to PayPal and plead that the shipping address where the store sent the product and the shipping address on PayPal are different.