Hello everyone, I´m writing a tool that lets users configure their Paypal classic API credentials to receive monthly payments from subscriptions. I´m worried our site can be hacked and the credentials can be stolen and used to subtract funds of our users in which case I will have to find a different solution.
To me, it appears that the Paypal classic API credentials can be used only to receive payments, but I can't find a confirmation of this, so will appreciate any comments on this. Thank you.