Currently, the amember script waits for a message from paypal which may or may not come. With paypal you never know. So here are a few cases in which this is abused. 1. The user cant pay/account is 0, whatever. The subscription will say it was denied, and that paypal will try again in 3 days. It will do this several times. During this time, the user gets free access that he is not paying for. 2. If the server is down for any reason when paypal sends this cancel message, it will not expire. The subscription will remain active forever. To correct, I suggest that it be changed, to a expire when the paid period is over. Upon a payment, it will increase the expiration date. Ie, so it will only increase the expire date when a payment is received. Instead of allowing it to go on forever until a cancel is seen. Please help.