Skip to content

Conversation

AkashVarsani
Copy link

if we are not disabling the email, then anyone can change other's razorpay credentials by using their email, as we used below code

// in useractions.js :

// await User.updateOne({email: ndata.email}, ndata)

//Here user can use other person's email to replace their razorpay credentials with own credentials to get all payments in self account.

if  we are not disabling the email, then anyone can change other's razorpay credentials by using their email, as we used below code

// in useractions.js :

// await User.updateOne({email: ndata.email}, ndata)

//Here user can use other person's email to replace their razorpay credentials with own credentials to get all payments in self account.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant