in reply to Any tips on writing a shopping cart?

Don't trust the client?

I am almost embarrassed to mention it, but you would be amazed at how many sites keep prices in form data and blindly accept any garbage you choose to submit back for that...

  • Comment on Re: Any tips on writing a shopping cart?

Replies are listed 'Best First'.
Re: Re: Any tips on writing a shopping cart?
by Anonymous Monk on Dec 22, 2002 at 16:57 UTC
    And for those who are patting themselves on the back for not including the prices in something you can get to by viewing as HTML, this reminded me that using cookies for it is no better...
Re: Re: Any tips on writing a shopping cart?
by BrentDax (Hermit) on Dec 22, 2002 at 18:52 UTC
    I've heard about such setups. Pathetic, isn't it? :^)

    No, prices are specified in a server-side Perl module, separate from the session data structure. I'm inexperienced with this sort of application, not stupid. :^)

    =cut
    --Brent Dax
    There is no sig.