[SoGeek]

No, the page cannot be modified by a malicious individual, it's PHP and MYSQL, all GET variables are protected by strip_tags and htmlentities, the informations FTP and ID product are crypted.

You understand, if I let the possibility for the user to install the page on his site, he can change it and do something 'dangerous' for the players.

This is one reason why I prefer to go through my site when paying.

@Administrator Please recheck your approbation

If you want, i can give you the source code of the php page.

[Matthias Vance]

What we're doing here is risk assessment.

You are hosting this yourself, so there is a risk involved, which I'm not willing to vouch for.

It's good that it goes directly to the account of the people who set it up, but there is still that risk.

You're welcome to discuss this on IRC.

[asherkin]

This system is way too dangerous to be hosted by an untrusted (or any in fact) 3rd party, especially since you ask for a server's FTP info.
I'm removing the attachments and links and trashing the thread.

While I'm sure this was made with good intentions, it's just too abusable.