diff --git a/admin/post/payment_provider.php b/admin/post/payment_provider.php
index d24884969..8500aeaf3 100644
--- a/admin/post/payment_provider.php
+++ b/admin/post/payment_provider.php
@@ -1,7 +1,7 @@
accounts->retrieve();
+ } catch (Exception $e) {
+ flashAlert("Error checking Stripe key: " . $e->getMessage(), 'error');
+ redirect();
+ }
+ }
flashAlert("Payment provider
$provider created");
@@ -42,7 +54,6 @@ if (isset($_POST['edit_payment_provider'])) {
validateCSRFToken();
$provider_id = intval($_POST['provider_id']);
- $description = escapeSql($_POST['description']);
$public_key = escapeSql($_POST['public_key']);
$private_key = escapeSql($_POST['private_key']);
$threshold = floatval($_POST['threshold']);
@@ -54,6 +65,18 @@ if (isset($_POST['edit_payment_provider'])) {
logAudit("Payment Provider", "Edit", "$session_name edited Payment Provider $provider");
+ // Check Stripe sk
+ if ($_POST['provider'] === 'Stripe') {
+ try {
+ require_once '../includes/stripe_init.php';
+ $stripe = new \Stripe\StripeClient($private_key);
+ $account = $stripe->accounts->retrieve();
+ } catch (Exception $e) {
+ flashAlert("Error checking Stripe key: " . $e->getMessage(), 'error');
+ redirect();
+ }
+ }
+
flashAlert("Payment Provider
$provider edited");
redirect();
diff --git a/guest/guest_pay_setup_stripe_customer.php b/guest/guest_pay_setup_stripe_customer.php
index 84136d8e8..1cb1d8a9c 100644
--- a/guest/guest_pay_setup_stripe_customer.php
+++ b/guest/guest_pay_setup_stripe_customer.php
@@ -79,14 +79,14 @@ if (isset($_GET['invoice_id'], $_GET['url_key'])) {