Greetings steemians!

So it has been a bumpy ride for the first Wordpress plugin that makes accepting STEEM/SBD possible.

Yes! I made the first plugin ever!

After a successfull launch and good feedback, i've helped users who still had questions, and after about 5h after launch I closed the evening with this message on the #witness chat channel:

Hive account@fyrstikken made a review of the woo plug-in. 5 star rating. Sweet! Now, my fellow witnesses, I'll go to sleep for the first time in days at a reasonable hour (23:15). Read you all tomorrow guys.

06:00: Waking up....

Hive account@roelandp discovered an essential flaw in my plugin. What!! How? Where? After reading trough his post I said to myself, this can't be happening! I've run at least a dozen of tests against this kind of issues? What's wrong!

You dumb *********************** !!!!!!!

Seriously? I uploaded the wrong folder to Github?? Oh shiat! I really did upload my development folder to Github instead of the production one!

The tiny difference that made the exploit possible can be found right here:

Dev file (used for internal testing, values to 0)

$environment_url = ( 'https://steempay.io/payment/verify?' ) ;
$payload = array(
                    "payid"                 => $_REQUEST['payid'],
                    "receiver"              => 'steve-walschot', // ToDo: Replace with settings
                    "amount"                => "0", // ToDo: Replace with $wc_order->get_total()
                    "currency"              => "0", // ToDo: Replace with $wc_order->get_order_currency()
            );

Production file (the one you should be using)

$environment_url = ( 'https://steempay.io/payment/verify/woo?' ) ;
$payload = array(
                    "receiver"              => $this -> receiver_id,
                    "amount"                => $wc_order->get_total(),
                    "currency"              => $wc_order->get_order_currency(),
                    'merchant_order_id'     => $wc_order_id,
                    'output'                => $this->steem_currency,
                    'payid'                 => $_REQUEST['payid']
            );

Ok guys, it's a human error

I've uploaded the wrong source to Github. How? I'm not sure. I know i've used Github for Windows and assume I simply forgot that the folder was still my dev folder. I'll take the shot for that one.

The issue was resolved within minutes but the harm had been done. Hive account@roelandp made a post warning the users not to use the plugin until this issue had been resolved. Thanks again for that one, you prevented further damage to our userbase.

My aplogies to the people that could have suffered from my lack of concentration on those last meters of the sprint towards the first Wordpress plugin.

Just a small post to keep you all updated!