Title: problem with order-receipt.php
Last modified: November 19, 2021

---

# problem with order-receipt.php

 *  Resolved [SAY](https://wordpress.org/support/users/kalidarn/)
 * (@kalidarn)
 * [4 years, 6 months ago](https://wordpress.org/support/topic/problem-with-order-receipt-php/)
 * Hello dear developers! Please tell me how you can force this hook:
 * `<?php do_action( 'woocommerce_receipt_' . $order->get_payment_method(), $order-
   >get_id() ); ?>`
    be processed on the server side and not on the user side? Maybe
   there is an opportunity to redirect to this hook:
 * `<?php do_action( 'woocommerce_receipt_' . $order->get_payment_method(), $order-
   >get_id() ); ?>`
 * so that you can bypass this page: [https://test.wpcart.ru/checkout/order-pay/49/?key=wc_order_pTrGJt9aDBLXe&order=49](https://test.wpcart.ru/checkout/order-pay/49/?key=wc_order_pTrGJt9aDBLXe&order=49)
 * The thing is, [on this page](https://test.wpcart.ru/checkout/order-pay/49/?key=wc_order_pTrGJt9aDBLXe&order=49),
   any user in the open developer panel can change the value: **SUM**, for any. 
   And thereby buy the product at any lowest price!
 * Here is an example of how a user can easily change the price of a product!
    [⌊1⌉](https://ibb.co/LZKWPmP)
 * After changing the price, and clicking on the button: **Go to payment**
    [⌊2⌉](https://ibb.co/Zmc5vsx)
 * The user can pay for the product at his own price, and not the offered price 
   of the site.
 * [⌊3⌉⌊3⌉[
 * **I think this is a serious problem, especially if these are digital goods. Since
   the user gets access to download the product after such a payment!**
    -  This topic was modified 4 years, 6 months ago by [SAY](https://wordpress.org/support/users/kalidarn/).
 * The page I need help with: _[[log in](https://login.wordpress.org/?redirect_to=https%3A%2F%2Fwordpress.org%2Fsupport%2Ftopic%2Fproblem-with-order-receipt-php%2F%3Foutput_format%3Dmd&locale=en_US)
   to see the link]_

Viewing 3 replies - 1 through 3 (of 3 total)

 *  [Abiola Ogodo](https://wordpress.org/support/users/oaoyadeyi/)
 * (@oaoyadeyi)
 * [4 years, 6 months ago](https://wordpress.org/support/topic/problem-with-order-receipt-php/#post-15086648)
 * [@kalidarn](https://wordpress.org/support/users/kalidarn/)
 * This is a fairly complex development topic. I’m going to leave it open for a 
   bit to see if anyone is able to chime in to help you out.
 * I can also recommend [the WooCommerce Developer Resources Portal](https://developer.woocommerce.com/)
   for resources on developing for WooCommerce.
 * You can also visit the [WooCommerce Facebook group](https://www.facebook.com/groups/advanced.woocommerce/)
   or the `#developers` channel of the [WooCommerce Community Slack](https://woocommerce.com/community-slack/).
   We’re lucky to have a great community of open-source developers for WooCommerce,
   and many of our developers hang out there, as well.
    -  This reply was modified 4 years, 6 months ago by [Steven Stern (sterndata)](https://wordpress.org/support/users/sterndata/).
 *  Thread Starter [SAY](https://wordpress.org/support/users/kalidarn/)
 * (@kalidarn)
 * [4 years, 6 months ago](https://wordpress.org/support/topic/problem-with-order-receipt-php/#post-15087001)
 * I’m on one of the sites, I prescribed a **redirect in the plugin** itself for
   payment so that the client does not linger on this page, but this is not quite
   the right approach to solve this problem. Since this redirect still displays 
   the page for a few seconds, and only then there is a redirect to the payment 
   system!
 *  [3 Sons Development](https://wordpress.org/support/users/3sonsdevelopment/)
 * (@3sonsdevelopment)
 * [4 years, 6 months ago](https://wordpress.org/support/topic/problem-with-order-receipt-php/#post-15130535)
 * Hi [@kalidarn](https://wordpress.org/support/users/kalidarn/),
 * If I understand correctly, that wouldn’t typically work since it would fail the
   server-side validation. Have you been able to alter an order like this and actually
   gain access to the downloads? If so, have you spoken to the payment gateway creator
   about it?
 * If you can reproduce this using a built-in payment gateway or with one of the
   Automattic-made ones, please open up a security issue about it. Here’s the URL
   for where you can do that:
 * [https://automattic.com/security](https://automattic.com/security)
 * Let us know how it goes.

Viewing 3 replies - 1 through 3 (of 3 total)

The topic ‘problem with order-receipt.php’ is closed to new replies.

 * ![](https://ps.w.org/woocommerce/assets/icon.svg?rev=3234504)
 * [WooCommerce](https://wordpress.org/plugins/woocommerce/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/woocommerce/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/woocommerce/)
 * [Active Topics](https://wordpress.org/support/plugin/woocommerce/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/woocommerce/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/woocommerce/reviews/)

 * 3 replies
 * 3 participants
 * Last reply from: [3 Sons Development](https://wordpress.org/support/users/3sonsdevelopment/)
 * Last activity: [4 years, 6 months ago](https://wordpress.org/support/topic/problem-with-order-receipt-php/#post-15130535)
 * Status: resolved