There are fake receipts used by hackers, which are the receipts before iOS7.The Receipt can be successfully verified with an incorrect password.Is this a bug?https://developer.apple.com/documentation/appstorereceipts/verifyreceipt --Do I need to completely drop compatibility for this?
Receipt before iOS7, The Receipt can be successfully verified with an incorrect password.
Do I need to completely drop compatibility for the receipts before iOS7
Could you please file a ticket in Feedback Assistant (http://feedbackassistant.apple.com) and post the FB number here, containing one of these receipts.