Cloning points - gesior acc

[marian1]

Hi,
i have problem with cloning premium points from polish system (dotpay) in gesior acc maker

dotpay.log
normally it looks like this:

7j1u49t9=3235772
S1CM7JTT=2948560
55uce3bi=4079990

but now i can find sth like this:
abcdabcd&id=30535&code=inwob&check=1WR43M6V=44055
abcdabcd&id=30535&code=inwob&check=1WR43M6V=44055
abcdabcd&id=30535&code=inwob&check=1WR43M6V=44055
abcdabcd&id=30535&code=inwob&check=1WR43M6V=44055
abcdabcd&id=30535&code=inwob&check=1WR43M6V=44055

which adds the points despite the code has already been used
How i can protect against this?

 

[devianceone]

You need to login to daopay and set the option for codes to only be used once. Use search and find a daopay tutorial.

 

[qban]

Nope... You have to put the limit of characters which could be put in text area or exclude symbols like "&" or "=".

 

[Glidarn]

Try that (search function)

Solution #2
1. Log into your DaoPay
2. Go to Products, then Manage Products
3. Select your product, and click edit
4. 3rd line you will find something called "Validity"
5. Change it from "1 Day" to "1 Counts"
Problem solved

 

[koob]

$blocked = array("%", "&", "#36", "#37", "=");
$posted_code = str_replace($blocked, "", htmlspecialchars(trim($_POST[code])));

@EDIT
why r u fucking bumping old threads?

 

[qban]

I read it wrong (date of post)
I thought that was 2011.

 

[DonHagman]

However, wasn't he talking about Dotpay?