[sldev] Re: Patch to Address Debit Permission Spoofing
Argent Stonecutter
secret.argent at gmail.com
Sun May 27 19:42:23 PDT 2007
> No, you can't. That's just a client-side hint. The agent can pay
> whatever they want. If you trust SetPayPrice your object is very
> vulnerable.
In this context that's not an issue. All the lack of refund ability
would mean is that if someone tried to hack your vendor that way, you
wouldn't be able to pay them their "seed" money back. :)
More information about the SLDev
mailing list