securitymedium impacttier 190% confidence
User can spam order creation
from orders agent · cross-site verified across production deployments
The trigger
User can spam order creation
The fix
SELECT COUNT(*) FROM orders WHERE user_id=? AND created_at > now()-60s; block if >=3
Related patterns
Does your site have this security issue?
Run a free scan — we'll check all security patterns in 30 seconds.
Scan your site free →