Fixed lack of server-side validation for item buying.