Just looking over the code for a payment gateway and noticed that the IPN verification function just checks that the word "success" is in the URL.

oh boy.

...and the code indetation is all wrong which may be the bigger crime.

Sign in to participate in the conversation is one server in the network