mirror of
https://github.com/btcpayserver/btcpayserver.git
synced 2024-11-20 02:28:31 +01:00
30 lines
1.4 KiB
Plaintext
30 lines
1.4 KiB
Plaintext
@{
|
|
ViewData.SetActivePage(StoreNavPages.PayButton, "Pay Button", Context.GetStoreData().Id);
|
|
}
|
|
|
|
<partial name="_StatusMessage" />
|
|
<h2 class="mt-1 mb-4">@ViewData["Title"]</h2>
|
|
|
|
<div class="row">
|
|
<div class="col-md-10">
|
|
<div class="alert alert-warning alert-dismissible mb-4" role="alert">
|
|
<button type="button" class="btn-close" data-bs-dismiss="alert" aria-label="Close">
|
|
<vc:icon symbol="close" />
|
|
</button>
|
|
<p><strong>Warning:</strong> This feature should not be activated on a BTCPay Server store processing commercial transactions.</p>
|
|
<p>By activating this feature, a malicious user can trick you into thinking an order has been processed by creating a new invoice, reusing the same Order Id of another valid order but different amount or currency.</p>
|
|
<p class="mb-0">If this store process commercial transactions, we advise you to <a asp-controller="UIUserStores" asp-action="CreateStore" class="alert-link">create a separate store</a> before using the payment button.</p>
|
|
</div>
|
|
<p>
|
|
To start using Pay Button, you need to enable this feature explicitly.
|
|
Once you do so, anyone could create an invoice on your store (via API, for example).
|
|
</p>
|
|
<form method="post">
|
|
@Html.Hidden("EnableStore", true)
|
|
<button name="command" id="enable-pay-button" type="submit" value="save" class="btn btn-primary">
|
|
Enable
|
|
</button>
|
|
</form>
|
|
</div>
|
|
</div>
|