[GenSec]

Originally posted by dadymac
appears that store_file was never specified or was this from the karma hack??
i commented out this line and it still works, also, it seems to be (a lot) easier to steal with this version.

You are right. Store_file is used only in my store.
Delete it as I did :classic:
I'm using store_file to store users transactions.
Also I recommend to add insurance and godfather (or any other internal user account) in safe (unstealing) space. Just as admin account:

PHP Code:

 if ($getduser[usergroupid]=="6") { // don't steal from admin 


. Move those accounts to admin usergroup (usergroupid=6). Or replace to

PHP Code:

if ($getduser[usergroupid]=="6" OR $getduser[userid]=='INSURANCEID') {