[Zachery]

Originally Posted by RJ2

There is a major exploit in this hack that will let users donate virtually unlimited amounts of points to themselves or other users and only be charged a minimum amount. It's a simple technique for those who know how to do it, so it's important to fix this or your currency system will be pretty much useless! It does show up in the action transaction logs, so check them for funny entries in the point column.

FIX-

In uttstore/action.donate.php, look for both instances of this line:
$_FIELDS = uttstore_globalize_fields($fields);

ADD THIS LINE AFTER:
$_FIELDS['points'] = uttpoints_number_format($_FIELDS['points']);

It's also a good idea to turn off reputation for donating points since a user can donate all their points to themselves over and over and get unlimited reputation.

Are you 100% positive your running the .95a files?

I am fairlay sure we fixed this problem.