Gift Upgrades Not a Bug Strange issue

The following have just happened and I'm very scared because this could be a very bad bug:

MemberX (Banned) - Email: [email protected]
MemberY (Active) - Email: [email protected]

When MemberY clicks on the "Purchase" upgrade button (not the "Gift" upgrade button), he goes to Paypal. On Paypal, it happens that he logins as [email protected] (because, coincidentally, that's his Paypal account), he pays and then XenForo registers it a gift upgrade made by MemberY in favour of MemberX.

Could you please confirm this bug?
 
If I'm understanding you correctly, this is not how the add-on functions. When a user gifts someone and goes to pay, metadata is sent to the payment processor to identify it is a gift and not a purchase for the user themselves. It doesn't matter what the PayPal email is, if the metadata isn't present it won't be treated as a gift.

If you want me to take a closer look, I'd need the transaction log from your database and from PayPal. Feel free to PM me this.
 
Back
Top