Checkout accepts unrealistic gift card data and shows false payment success

[guelbin]

Bug Description

The checkout accepts unrealistic gift card numbers and weak validation codes without proper validation.

Even with random long input values, the system displays "Payment was successful".

Steps to Reproduce

1. Open checkout payment page.
2. Select "Geschenkgutschein".
3. Enter a very long random string as Gutscheinnummer.
4. Enter a simple validation code like 123.
5. Click "Bestätigen".

Expected Result

• Invalid or unrealistic gift card data should be rejected.
• Proper validation messages should appear.
• Payment success should not be displayed.

Actual Result

• Random and unrealistic inputs are accepted.
• "Payment was successful" is displayed.
• The validation appears insufficient.

Severity

Medium

[rgroetz2]

@guelbin can you please define the requirements for:

Invalid or unrealistic gift card data
Proper validation messages

[guelbin]

@rgroetz2 Thanks for the feedback.

I couldn't find a documented business requirement for gift card validation either.

As a possible requirement, I would suggest:

• The gift card number should be validated before processing.
• Empty, malformed, or obviously unrealistic gift card numbers should be rejected.
• The security code should also be validated according to the expected format.
• If the validation fails, the payment must not be processed.
• The user should receive a clear and user-friendly validation message indicating that the provided gift card information is invalid.

The exact validation rules (e.g. allowed length, format, and character set) should be defined by the project or Product Owner.

Would this approach be acceptable?

[testsmith-io]

https://testsmith-io.github.io/practice-software-testing/#/gift-card-validation