[ad_1]
I’m using this plugin on a client’s website and we’ve come across an issue. The client only sells to a few countries, and the ‘Check out with PayPal’ ‘PayPal Credit’ buttons from your plugin are present on the basket and checkout. We’ve discovered the following scenario:
1. A customer adds items to their basket, and calculates the shipping cost by selecting ‘UK’. Shipping to the UK costs £3.99.
2. The customer selects ‘Check out with PayPal’ and is taken to PayPal’s payment page.
3. The customer then selects their country as ‘Uganda’, which is not a country my client ships to.
4. The customer completes the purchase. They’ve successfully bought an item to be shipped to Uganda, which shouldn’t be allowed, for the price of UK shipping.
This method can also be used to circumvent shipping costs to ‘allowed’ countries. For example, shipping to Germany costs £14.95. A customer could calculate the cost based on UK shipping (£3.99) on the website, click the ‘Check out with PayPal’ button, select a German address, and then they’re able to buy a product for £10 less than they should be.
I note that the Country/Region field in the PayPal checkout is not auto-populated when you open the page. Is there a way of setting that country to be the one selected in the basket/checkout and not allow customers to change it?
I had a click around the various settings but didn’t get anywhere. I tried using the Smart Button option with sending shipping details enabled, but it didn’t make a difference.