Forged Payment Redirect Parameters

Checkout completion checks rely on client-controlled URL query/fragment or referer spoofing, so attackers can fake success_url parameters or fragment anchors to bypass “paid” logic without completing payment, especially when server-side verification is missing.