Gift card codes are worth money, so GiftRocket stops people from guessing them.
Rate limits are on by default and need no setup. If one visitor does too much in an hour, they are temporarily blocked and the attempt is recorded in the Security Log.
| Action | Limit per visitor per hour |
|---|---|
| Applying gift card codes at checkout | 40 |
| Opening gift card QR / apply links | 20 |
| Checking balances | 30 |
| Entering invalid codes | 10 |
| Uploading custom photos | 10 |
Normal customers never get anywhere near these limits.
Other Protection
- Gift card codes are long and random (at least 12 characters), so they can’t be guessed.
- A card can’t be spent twice at the same moment, even if a customer clicks Place Order several times.
- Only logged-in customers can upload photos.
