Audit my discount/coupon code system for abuse and lock it down. Check and fix each of these: 1. Redemption limits: every coupon should have a max redemptions cap (total and per-customer). Add both if missing. A code with no per-customer limit can be reused by the same person forever. 2. Expiry: every coupon should have an expiration date. Kill or expire old launch codes, influencer codes, and one-off apology codes that are still active. 3. New-customer abuse: for first-purchase discounts, check what stops someone from making a fresh account with a new email to reuse the code. At minimum tie the restriction to the payment method fingerprint (my provider supports this) in addition to the account. 4. Stacking: confirm my checkout applies at most one discount code and does not combine codes with automatic discounts in ways I did not intend. 5. Guessable codes: find codes that are short dictionary words (LAUNCH, SAVE20, WELCOME) and decide which to retire, since they get brute-forced and shared on coupon sites. Replace with longer random codes where the code itself is the secret. 6. Validation timing: confirm code validation happens server-side at purchase time, not just in the UI, so a crafted request cannot apply an expired or dead code. Do not break currently valid promotions; flag each change that affects a live code so I can communicate it. Give me a report per code: rules before, rules after, and the abuse case it closes. Include a test that tries to redeem an expired code and a second redemption past the per-customer limit, both rejected server-side.