Subscription Hack

I made an app in AI and requires subscription to access some pages.

I just want subscribers to view that page.

I use @Taifun plugin for purchase and subscription for the app.

My problem is this:

They can view pages without subscribing. How is it possible to circumvent the subscription or what can I do to prevent this?

I have examined some issues for application security, but I cannot fully solve the problem.

I have personally not tried Taifun's purchase extension. But you try to use a logic like this (assuming by "pages" you mean screens and not webpages) -

Once the user has successfully done the payment, you can set a tag in tinyDB to "true" or "1".
Now when the user tries to access the screen, that must be only done once they have paid for the subscription, you can use the initialization block of that screen.
In the initialization, check that if the tag in tinyDB is not equal to "true" or "1", then close that screen immediately.

You can try using the same logic if it is a webpage

you have to use the correct logic in your blocks...
before opening any page you have to check, if the subscription still is active, see the event OwnItemsLoaded and its listOwnSubscriptions parameter. Only if the subscription id can be found in that list, then the subscription still is active.

Also please see Q10 in the Q&A section about how to prevent App purchase bypass App Inventor Extensions: Billing | Pura Vida Apps

Taifun


Trying to push the limits! Snippets, Tutorials and Extensions from Pura Vida Apps by Taifun.