Just curious, what value would that have to the user?

Any financial computation should be done on the server, for security's sake. Doing this in Javascript to alter the target URL seems very strange.

I don't see why the URL must contain the results of a calculation at all. If the server computes the total, then requiring a redirect to get the total into the browser's URL will add complication and reduce portability for different browsers. It'll break the "Back" button, too. If the client calculates it, you need a client capable of doing the calculation (javascript might not be available, or may have been turned off), and as mentioned above, it's exposed for meddling.

The client should only know the transaction ID and some authentication token. The server should not trust anything the client gives it. The server can offer any information the user must read, and can accept input from the user, but must double-check the validity of anything the client sends.

--
[ e d @ h a l l e y . c c ]

In reply to Re: Add And Redirect by halley
in thread Add And Redirect by Anonymous Monk

Title:
Use:  <p> text here (a paragraph) </p>
and:  <code> code here </code>
to format your post, it's "PerlMonks-approved HTML":


  • Posts are HTML formatted. Put <p> </p> tags around your paragraphs. Put <code> </code> tags around your code and data!
  • Titles consisting of a single word are discouraged, and in most cases are disallowed outright.
  • Read Where should I post X? if you're not absolutely sure you're posting in the right place.
  • Please read these before you post! —
  • Posts may use any of the Perl Monks Approved HTML tags:
    a, abbr, b, big, blockquote, br, caption, center, col, colgroup, dd, del, details, div, dl, dt, em, font, h1, h2, h3, h4, h5, h6, hr, i, ins, li, ol, p, pre, readmore, small, span, spoiler, strike, strong, sub, summary, sup, table, tbody, td, tfoot, th, thead, tr, tt, u, ul, wbr
  • You may need to use entities for some characters, as follows. (Exception: Within code tags, you can put the characters literally.)
            For:     Use:
    & &amp;
    < &lt;
    > &gt;
    [ &#91;
    ] &#93;
  • Link using PerlMonks shortcuts! What shortcuts can I use for linking?
  • See Writeup Formatting Tips and other pages linked from there for more info.