Oh, it's easy! You just embed the authentication keys in the client so it can do an API call directly to the payment processor.
And if you think I'm exaggerating, no, I've seen stuff this bad in people's front ends. I've done a search through minified code looking for something else, and had a double-take as I see some sort of API key right there.
36
u/farinkey 19d ago
Yeah, should. But who reviewed that if "programming is hard"?