diff --git a/htdocs/public/payment/paymentok.php b/htdocs/public/payment/paymentok.php index c46542ed3c4..c8222c4c4aa 100644 --- a/htdocs/public/payment/paymentok.php +++ b/htdocs/public/payment/paymentok.php @@ -412,7 +412,7 @@ if ($ispaymentok) { $currencyCodeType = $_SESSION['currencyCodeType']; - dol_syslog("FinalPaymentAmt=".$FinalPaymentAmt." paymentTypeId=".$paymentTypeId, LOG_DEBUG, 0, '_payment'); + dol_syslog("FinalPaymentAmt=".$FinalPaymentAmt." paymentTypeId=".$paymentTypeId." currencyCodeType=".$currencyCodeType, LOG_DEBUG, 0, '_payment'); // Do action only if $FinalPaymentAmt is set (session variable is cleaned after this page to avoid duplicate actions when page is POST a second time) if (!empty($FinalPaymentAmt) && $paymentTypeId > 0) { @@ -440,6 +440,9 @@ if ($ispaymentok) { } } + // Security protection: + // TODO check that currency is same ? + if (! $error) { // We validate the member (no effect if it is already validated) $result = ($object->status == $object::STATUS_EXCLUDED) ? -1 : $object->validate($user); // if membre is excluded (status == -2) the new validation is not possible @@ -1684,6 +1687,8 @@ if ($ispaymentok) { print "\n\n"; +print "\n"; + htmlPrintOnlinePaymentFooter($mysoc, $langs, 0, $suffix);