Fixed a critical vulnerability to do with credit purchases where packages cost greater than 1000 credits. Update ASAP.
Web
- Fixed a critical vulnerability to do with credit purchases where packages cost greater than 1000 credits. Update ASAP.
- Fixed transferring credits to other users.
- Fixed an issue where redirecting to Stripe may not work if the ID returned from Prometheus has a space at the beginning.
Modified files
Web
- inc/credits.php
- inc/functions.php
- inc/classes/verification.class.php
- profile.php
- store.php
- pages/store/purchase.php