3 ms·

Paypal restricts iframe embedding. They have a method called Adaptive Payment[1], which enables you to pay directly on merchant's site via a mini browser window

Paypal restricts iframe embedding. They have a method called Adaptive Payment[1], which enables you to pay directly on merchant's site via a mini browser window or lightbox, but this option requires you to be logged in to Paypal already. If you aren't already logged in, it opens a new window for you to log in. Never, ever enter your Paypal password into the merchant's site. I don't think it is possible to hide your paypal email address when doing payments. [1]: https://developer.paypal.com/docs/classic/adaptive-payments/integration-guide/APIntro/ https://developer.paypal.com/docs/classic/adaptive-payments/...

cantrevealname 12y ago
> I don't think it is possible to hide your paypal email address when doing payments. OK, thank you. Regarding the Adaptive Payment suggestion, it seems that it's still under control of the merchant, and if the merchant site was nefarious they could fake an Adaptive Payment for me to log into. You're correct in saying that I should never enter my PayPal password into the merchant's site. I also don't want the merchant to re-direct me. I don't want the merchant to open an Adaptive Payment window for me. I want to open a completely separate browser window and login to PayPal myself, and then pay the merchant by looking up the merchant's ID or using an invoice number provided by the merchant. Is there no way to do that?
- hakanderyal 12y ago
  > Is there no way to do that? Nope, there isn't a way to do that. If you want this because you are concerned about the security, the current way it works is pretty secure. Even if the merchant redirects you, it opens a new browser window/tab of Paypal's own web page. You can check the identity with https indicator in you browser bar. You enter your password there, logging in to Paypal yourself. Merchant redirecting you doesn't affect the security in any way.

cantrevealname 12y ago

> I don't think it is possible to hide your paypal email address when doing payments. OK, thank you. Regarding the Adaptive Payment suggestion, it seems that it's still under control of the merchant, and if the merchant site was nefarious they could fake an Adaptive Payment for me to log into. You're correct in saying that I should never enter my PayPal password into the merchant's site. I also don't want the merchant to re-direct me. I don't want the merchant to open an Adaptive Payment window for me. I want to open a completely separate browser window and login to PayPal myself, and then pay the merchant by looking up the merchant's ID or using an invoice number provided by the merchant. Is there no way to do that?

hakanderyal 12y ago
> Is there no way to do that? Nope, there isn't a way to do that. If you want this because you are concerned about the security, the current way it works is pretty secure. Even if the merchant redirects you, it opens a new browser window/tab of Paypal's own web page. You can check the identity with https indicator in you browser bar. You enter your password there, logging in to Paypal yourself. Merchant redirecting you doesn't affect the security in any way.