[GenSec]

Originally posted by vdinh
Hi GenSec,
One of my users actually uses the Back button to keep stealing until he is successful ... I already set up so that if a user's money is negative, he won't be allowed to steal. However, once this user was caught and his money was below 0, he keeps hitting the Back button to go back to steal and was able to do so ...

Is there a way to stop this? Thanks

It should to help:

PHP Code:

// ###################### Start Verify Stealing #######################
if ($action=="stealverify") {
$getrobber=$DB_site->query_first("SELECT storep FROM user WHERE userid='$bbuserinfo[userid]'");
If ($getrobber[storep]<0) {
    eval("standarderror(\"".gettemplate('store_steal_cannot')."\");");
}
$getduser=$DB_site->query_first("SELECT userid,usertitle,username,storep FROM user WHERE username='".addslashes(htmlspecialchars($stealusername))."'");
$contest = $DB_site->query_first("SELECT * FROM store WHERE action='steal'");
$storeid=$contest[id];