Sigma-Web-Dev-Course
Sigma-Web-Dev-Course copied to clipboard
Update Dashboard.js
if we are not disabling the email, then anyone can change other's razorpay credentials by using their email, as we used below code
// in useractions.js :
// await User.updateOne({email: ndata.email}, ndata)
//Here user can use other person's email to replace their razorpay credentials with own credentials to get all payments in self account.