I'm not going to tell you you made a mistake, but since you have programming experience I'll tell you how it looks from this end to help you judge whether I'm being too dismissive:
- The order logs I posted above specifically show the following set of form data being entered: [2725252] => Array
[type] => Hold,
[type] => Hold,
[type] => Move,
(
[type] => Move
[toTerr] => Ruhr
),
(
[type] => Move
[toTerr] => Ruhr
)
- These values are logged before any processing is performed on them, it's pretty much just file_put_contents($logfile,print_r($_REQUEST['orderForm'],true),FILE_APPEND)
- Programmers have been sure they experienced the bug before. (In fact out of just a couple dozen reports over the years this is the third to come from a self-admitted programming veteran)
- File modification times and append-only httpd logs have been used to test the more unlikely theories like account theft and server breakins, with nothing suspicious ever found
- The code is revised pretty regularly and reports of accidents don't correlate with code updates
- Reports of accidents closely correlate quick submission times and lack of finalization
- The bug is always the sort of mistake someone could make, we've never had an "army in ruhr move to barents sea" bug
- The bug is reported on other servers, the same sort of frequency, bug type and outcome, with code versions years apart
- With many millions of orders even a tiny chance of a convincing mistake is enough to make them likely
- Some people experience the bug 2-3 times while others will play much longer and never experience it
- If the player starts taking screenshots to demo the bug it stops happening
People who experience these things are usually convinced it was a bug, but hopefully at least now you understand know why I don't consider it a bug