Amount value in payment.php

[fashionandbeauty]

Make sure the payment.php file retrieve the order amount value through order reference or another unique reference. $_POST['amount'] can be manipulated via regular Firefox browser in the html form which is sending the value to payment.php. My tests has shown that if you edit the amount value in the html form (via firefox) and then submit it, the transaction will process successfully and you will end up with receiving different amount (can be lower) but having the impression that everything is alright.