Well, the final server side purchase shows the 1 card, $10 amount, so a fair amount of server side validation is being done.