[sldev] Re: Patch to Address Debit Permission Spoofing

Argent Stonecutter secret.argent at gmail.com
Sun May 27 19:42:23 PDT 2007


> No,  you can't.  That's just a client-side hint.  The agent can pay
> whatever they want.  If you trust SetPayPrice your object is very
> vulnerable.

In this context that's not an issue. All the lack of refund ability  
would mean is that if someone tried to hack your vendor that way, you  
wouldn't be able to pay them their "seed" money back. :)


More information about the SLDev mailing list