The code below is first the client code, then the class file.
For some reason the \'deductTokens()\' method is calling twice, thus charging an account double. I\'ve been
The line:
header('location: account.php');
Forwards the browser, but doesn't end the php script.
This might be fine, the code-snippet you gave doens't "do" anything after this line.
Another option might be a double-click
If you double-click on the submit button, the form will be sent twice.
We used some javascript to disable the submit button after the first click.