Contrib.social

Allow editing the billing address, but not the shipping address in checkout

Open on Drupal.org →
Created on 27 November 2024, 9 months ago

Problem/Motivation

Using PayPal Checkout through the PayPal Smart Checkout ("Show Smart Payment Buttons on the cart page") I currently see two issues:

  1. The billing address can't be edited. Clicking "Edit" on the billing address in the Review step leads back to the Order information step. But on that step there's no Billing address shown that can be edited. All panels are present in the admin area.
  2. When using the PayPal Smart Checkout buttons, the shipping address is fetched from PayPal. This is essential for its functionality, I think (to replace PayPal Express). When using the Debit or Credit card functionality (not requiring a PayPal Login), the user who pays is not fully authenticated. If the shipping address can be changed in the order process then, I see a risk of fraud? https://www.paypal.com/tc/webapps/mpp/security/prevent-fraudulent-orders (Changing the address to a fraud address after entering Credit Card or Direct debit details of someone else and make it through PayPals detection). See https://www.wiwo.de/unternehmen/dienstleister/black-friday-2024-betrugsm... for real world cases.

Steps to reproduce

See above

Proposed resolution

Allow entering the billing address, but not the shipping address, if the smart payment buttons are used?
Maybe show an explanation to the customer?

Remaining tasks

  1. Discuss
  2. Decide
  3. Implement
  4. Test
  5. Release

User interface changes

API changes

Data model changes

🐛 Bug report
Status

Active

Version

1.0

Component

PayPal Checkout

Created by

🇩🇪Germany Anybody Porta Westfalica

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

contrib.social Blog FAQ Discussions
Production build 0.71.5 2024