Question

After successful purchase my app sends the transactionReceipt to server so that it is validated using https://buy.itunes.apple.com/verifyReceipt. .

Now i does the following.

1. store the key in db
2. if the status received is 0 php script add the sucbscription to the
   user.
3. expire the key.,up to this its ok but he problem now is

if the user somehow submit the transactionReceipt which he has used for some other purchase and sent to our server .it also validate true if posted to https://buy.itunes.apple.com/verifyReceipt so he gets another subscription for free .
please help to solve this issue

Answer 1

Apple has a documentation about this issue here.

basically the verifyReceipt respond holds a receipt field with data about the original transaction. you need to check this data if it belongs to the right purchase and make sure, the customer does not get the purchase twice.