My google billing hack

Discuss
1

Add Details about what you want to discuss..

Block Images(if Any)

AIA OR APK(if Any)

Untitled
Untitled401×768 56.4 KB

hacked by lucky pacher or somethingsame, not firebase but bypass billing, what sould ii do with this,for strong securty billing for callback from google,not lokal calbbak like this block if user succes pay then do something

2

make sure what is hacked…billing or firebase :face_with_monocle:

3

bypass billing

4

How did you know about hacking? & What is inside levelup?

5

from console no one purchesed , but user get vip

6

Well you’re just doing client side validation which is basically in your app, What you should be doing is looking into server side play purchase validation and update the database server side.

Whatever you do in your app is client sided and a knowledgeable user can “hack” it.

Apps like LuckyPatcher can trigger Purchase Successful events but most apps nowadays make sure the purchase is legit server side.

7

You should provide vip after verifying play billing purchase token on client side & server side if your firebase db rules are read:true, write:true (open database) then anybody can hack your fbdb.

8

can you solve this, with block or else?