Insecure payment processing using paypal Commerce. 
Autor: Amy W.Due to development issues Incomedia couldn’t solve, I was left unable to accept card payments on my v16 website. As I was beginning the search for a new website solution, Incomedia brought out the new version with PayPal Commerce and I took a leap, upgraded to the new version so I could again, accept card payments on my website.
I have set up the PayPal commerce on my website this morning, it was easy and straight away I could accept card payments however, I have soon realised a big problem. PayPal do not receive shipping information entered on the website along with the card details entered. PayPal therefore, only tell me if the card CVV2 is a match. They can not tell me if the address is a match.
If I ship an item which does not have a matching shipping address, a chargeback can easily be initiated and the money from that transaction will be refunded back to the card used for payment. At this point I will have lost both the money and the item.
I have spent over an hour on the phone to PayPal this morning who fully understand that this is not secure payment method for website orders and they consulted the dedicated PayPal Developer Team for me. The PayPal Developer Team have advised me that the developers (Incomedia) have in fact used the incorrect button. Incomedia have set up the PayPal Commerce direct payments as an instore transaction purchase, not a website transaction which requires shipping.
I am not happy with this payment method as it is. I do not want to ship orders which potentially are fraudulent transactions and will therefore not be using PayPal Commerce through Website X5, until it is integrated correctly by Incomedia.
Are Incomedia aware of this problem? Do Incomedia intend to change this or is this not possible for Incomedia to achieve?
Autor
Yes, it is a serious problem.
There doesn't seem to be anything within Website X5 where we can control this ourselves. According to the PayPal Developer team, this is someting which need to be configured by the devolopers using code provided by PayPal Developer team.
From what I can understand, I would need to allow Incomedia access to my PayPal through a PayPal Developer account. They would then be able to set up the code needed. I am a novice to coding but t me, it sounds as though the correct PayPal Commerce system would need to be custom coded to each individal project and if this is the case, then I doubt Incomedia will do so.
I will await to hear back from Incomedia but if they are not able to intergrate the correct form of PayPal Commerce within the Website X5 program, then I will not be using it going forward.
@ Amy
I think this is being fived in the next version - pls. find the preview version info.
@ Amy
Typo in my post: "being FIXED"
Yes, this was sorted in version 2020.3.2 exactly like Sinisa states.
It shouldn't take too long before the Preview version is rolled out for general release.
Autor
Great, hopefully it won't take long to be rolled out. Does anyone know when it will be available? I am unable to view preview info as it won't allow me to add my upgraded licence so it says I don't have a vaild licence to take part in the preview program.
I don't know exactly when 2020.3.2 will go mainstream, but I'll ask Incomedia to take a look at your profile and assist you with your licence issue, Amy. Please continue to monitor the thread for their response.
Just a heads up... any projects which you might work on in the Preview version can't be imported back to regular WebSite X5. The Preview version is for testing and experimentation only. So it's a good idea not to move important projects over to it unless you retain a standard IWZIP export, etc.
Autor
Will do, thanks Paul.
Hello Amy
I can confirm that the issue was in fact taken care of. It will be there in the newest version which will be released in the upcoming days.
Thank you for your patience as we get the new version ready for release
Stefano