With Drupal+Ubercart, be wary of alternative payment gateways
by Dylan Tack, Lead Development Architect
If you are using Ubercart to do ecommerce with Drupal, be sure to use one of the mainstream payment gatways: Authorize.net or Paypal. While Ubercart does support a number of alternative payment gateways, the dangers in going with these alternatives are significant. Here's an example of a single day where two of the less well known Ubercart payment modules were exposed as having flaws that allow people to checkout without needing to pay: SA-CONTRIB-2010-062 - Ogone | Ubercart payment - Access Bypass SA-CONTRIB-2010-064 - Ubercart MIGS Payment Gateway - Web Parameter Tampering Read More…