- X sends an ecard to Y, and checks the option to get a return receipt when the card is read.
- Y views the ecards and refreshs the pages 10 times.
- X gets 10 return receipts !
I think I found the bug. Line 45, in ecard.php, you have :
Content visible to verified customers only.
$readate should be $readd