我发现您可以更新订单状态，甚至添加具有WooCommerce端点的产品：
登录时唯一需要的是您自己的承载令牌。然后，您可以将状态设置为付费>付费和WebShop所有者认为您支付了订单。
当订单的状态设置为付费时，您可以编辑订单并向其添加更多产品。
我们如何确保此问题？我缺少什么吗？
I figured out that you can update an order status and even add products with a WooCommerce endpoint:
https://woocommerce.github.io/woocommerce-rest-api-docs/#update-an-order
The only thing that you need is your own bearer token when you are logged in. Then you can set the status to paid and the webshop owner thinks that you paid the order.
When the status of the order is set to paid, you can edit the order and add more products to it.
How can we secure this issue? Is there something I am missing?
发布评论