I have now a subscription service on my site that is allowing for user to subscribe through paypal for a small amount each month. When the transaction completes the user is sent back to subscribe.php?complete=1 so they account can be upgraded but what is to stop them from typing in the url without going through paypal?
Thank you