littleshop/TeleBot/TeleBot
SysAdmin 32d80e4b54 Fix: Currency display consistency and remove PGP security vulnerability
## Critical Bug Fixes

### Currency Display (£ vs $)
- Fix MenuBuilder.cs: Replace $ with £ for product prices (line 60) and order totals (line 329)
- Fix ProductCarouselService.cs: Replace $ with £ in product captions and multi-buy offers (lines 317, 325)
- Fix CallbackHandler.cs: Replace $ with £ in order confirmation message (line 800)

### Payment Amount Display Bug
- Fix MessageFormatter.cs: Remove flawed crypto detection logic (< 1.0m check)
- Bug: Order for £700 in ETH displayed as "£1.66" instead of "1.66 ETH"
- Root cause: RequiredAmount is always stored as crypto amount, not fiat
- Solution: Always display RequiredAmount with crypto symbol
- Impact: Fixes display for XMR, DOGE, LTC, and large ETH amounts

## Security: Remove PGP Encryption Feature

### Critical Security Issue Resolved
- PGP "encryption" was only Base64 encoding - NOT real encryption
- Shipping addresses stored as easily decoded text
- False sense of security for users

### Changes Made
- Mark EncryptWithPGP method as [Obsolete] in PrivacyService.cs
- Remove PGP encryption logic from order creation (LittleShopService.cs)
- Mark PGP properties as [Obsolete] in UserSession.cs models
- Disable EnablePGPEncryption feature flag in appsettings.json
- Add comments explaining feature removal

### Recommendation
Implement proper PGP encryption using BouncyCastle in future, or keep removed.

## Testing Required
- Verify all prices display with £ symbol
- Verify crypto payments show correct amount format (e.g., "1.66000000 ETH")
- Verify no PGP options appear in UI
- Test order creation without PGP encryption

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-10-03 17:36:10 +01:00
..
Controllers Configure BTCPay with external nodes via Tor 2025-09-19 12:14:39 +01:00
Handlers Fix: Currency display consistency and remove PGP security vulnerability 2025-10-03 17:36:10 +01:00
Http Fix: Update all TOR proxy configurations to support TorSocksHost 2025-10-03 12:48:07 +01:00
Models Fix: Currency display consistency and remove PGP security vulnerability 2025-10-03 17:36:10 +01:00
Services Fix: Currency display consistency and remove PGP security vulnerability 2025-10-03 17:36:10 +01:00
UI Fix: Currency display consistency and remove PGP security vulnerability 2025-10-03 17:36:10 +01:00
appsettings.json Fix: Currency display consistency and remove PGP security vulnerability 2025-10-03 17:36:10 +01:00
BotConfig.cs Configure BTCPay with external nodes via Tor 2025-09-19 12:14:39 +01:00
BotScript.cs Initial commit of LittleShop project (excluding large archives) 2025-09-17 15:07:38 +01:00
CAROUSEL_FEATURE.md Initial commit of LittleShop project (excluding large archives) 2025-09-17 15:07:38 +01:00
Dockerfile Initial commit of LittleShop project (excluding large archives) 2025-09-17 15:07:38 +01:00
Program.cs "Fix-TOR-proxy-host-configuration-in-LittleShop-Client" 2025-10-03 16:22:21 +01:00
TeleBot.csproj Update TeleBot configuration and add versioning 2025-09-27 09:50:12 +01:00
TelegramBot.cs Initial commit of LittleShop project (excluding large archives) 2025-09-17 15:07:38 +01:00
TelegramBotService.cs Fix: Update all TOR proxy configurations to support TorSocksHost 2025-10-03 12:48:07 +01:00
test-wizard-result.html Add customer communication system 2025-08-27 18:02:39 +01:00
TestCarousel.cs "Fix-Use-short-IDs-for-product-buttons-and-simplify-to-Buy-button" 2025-10-03 15:48:54 +01:00
TOR-DEPLOYMENT-GUIDE.md CI/CD: Add GitLab CI/CD pipeline for Hostinger deployment 2025-10-01 13:10:48 +01:00
wizard-page.html Add customer communication system 2025-08-27 18:02:39 +01:00
wizard-result.html Add customer communication system 2025-08-27 18:02:39 +01:00
wizard-test.txt Add customer communication system 2025-08-27 18:02:39 +01:00