Prices and quantities in the cart are whatever the product form posted - the server never re-checks them. The RAT10 coupon has no single-use enforcement. The saved-cart restore base64-decodes and unpickles your blob.
RAT10