I stumbled across this bug when one of my client's customer's accidentally put the symbol "&" instead of the number "7". This caused the XML sent to PayPal to break and resulted in PayPal responding that the order total didn't match the cart totals. Error code 10413.
So, either the PayPal module needs to be updated to convert to html entities (not sure if that will solve the issue or not), or we need some sort of sanitization of the telephone number on create account.
Bookmarks