That was my first thought, where's the server-side validation that the amount submitted is in-line with what the UI showed. In this case it was higher than the

That was my first thought, where's the server-side validation that the amount submitted is in-line with what the UI showed. In this case it was higher than the UI stated, but what happens if it was lower...