Forum

Hi

In the Iframe, can I choose a default payment option other than mpesa say VISA since it will be the most used method in my implementation.

Thanks

Greetings Qsolutions,

We do not have the ability to allow you to choose the default payment options.

Are there any future plans on making this option available?

I am facing the exact oposite problem. From user testing, we've seen that most of our users have no VISA card and want to pay via M-Pesa. However, they have a lot of difficulties locating the M-Pesa payment option.

We'd therefore really like to have M-Pesa as our default payment method.

Also, since this topic is only three weeks old, when did the default payment method change to VISA?

Hi,

Why not try to do so by setting the focus to the element on the iframe once it is loaded using JQuery or some javascript

Hi Ayesh,

That's not possible. A cross domain iframe does not allow you to execute javascript coming from another domain in it because of so called CORS security measures. These measures help prevent cross side scripting attacks. Which is good, because it would pose a great risk should I be able to run my own javascript inside the pesapal iframe.

For example if I am a hacker and this is possible, I could make sure that when a user clicks confirm, the mpesa code does not go to pesapal but to some service I have running in Russia. And I later use that MPESA code to pay myself on some account on the Cayman islands. Even worse, I would be able to steal VISA/Mastercard data.