[caimakale]

I have been testing the "Can Change Always" feature of the site and noticed that if an item set to can change always and purchased for the first time by a user, they are never charged for it.

I have set up a test account with no flags and past purchases to test this and was able to login and purchase colored username without it affecting my points total. I also allow refunds on my site, so I went to return the item, and it credited me back what should have been the purchase price, so I walked away from the deal more points in my pocket than when I started.

So this creates a points exploit for any of your "Can Change Always" items if you have refunds enabled. If not then it is a free giveaway in the stores on those items.