search

verbb / gift-voucher

A Craft Commerce plugin to provide Gift Certificate/Voucher functionality.
Other
14 stars 16 forks source link

Custom amount has min/max option (spam/fraud prevention) #89

Open splendidrob opened 2 years ago

splendidrob commented 2 years ago

What are you trying to do?

We are seeing a few cases of fraudulent transactions on a site mainly using the gift card custom amount, seemingly to test stolen card details against a small transaction cost ($1 etc...) we are seeing thousands of transactions against the order until finally a card works. We are mitigating this by setting a min amount on our front end form and also recaptcha etc, but we think it would be helpful to have a minimum option in the gift voucher plugin also.

What's your proposed solution?

Custom gift vouchers have an optional min/max amount setting.

Additional context

No response

engram-design commented 2 years ago

Unfortunately that's the pitfall of virtual payments, and we see similar abuse on donation sites, where users are testing stolen cards quickly/easily with no need for shipping costs.

For the moment, the way to handle this is through enforcing a min attribute on the input on the front-end, but happy to add a mechanism server-side to set this as well, which would be handy. Same for a maximum amount.

bymayo commented 1 year ago

We'd also like to see this, so that min/max could be set in a voucher or code as currently even with adding a min attribute to the field, you can still easily get around it (If you know how to)