Avatown has a approval process in-place for new products, which is perfect for preventing spam & malicious listings.

But, you can just update your own product's `isApprovedByAdmin` field to true, bypassing this protection entirely.

Did you know everything on Avatown is free?

When creating an order, your client sends a request to /api/v1/order/makeStripePayment, which would be fine, except for the fact that you provide which product you want & the price of it.

Server-side validation, what's that?

I have leftover pizza, but it was spicier than I could handle.

I think they are directly shown on your profile, but per-post you can.