Someone is abusing openai api through a bug

this is good research, but ultimately for the checkout it is just how it works, using their backend to create the checkout session, can’t really do much about that except add more anti-bot mechanisms