From 4cb35863d0b9febc9b31cd6017b0edcbb3c4eab1 Mon Sep 17 00:00:00 2001 From: moodler Date: Tue, 22 Sep 2009 01:51:19 +0000 Subject: [PATCH] paypal MDL-20322 Make sure the currency is set correctly. --- enrol/paypal/ipn.php | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/enrol/paypal/ipn.php b/enrol/paypal/ipn.php index e88367e2724..44a3cef19ea 100644 --- a/enrol/paypal/ipn.php +++ b/enrol/paypal/ipn.php @@ -98,6 +98,13 @@ die; } + // If currency is incorrectly set then someone maybe trying to cheat the system + + if ($data->mc_currency != $course->currency) { + email_paypal_error_to_admin("Currency does not match course settings, received: ".addslashes($data->mc_currency), $data); + die; + } + // If status is pending and reason is other than echeck then we are on hold until further notice // Email user to let them know. Email admin.