You can always pass the parameters and just not use the item id instead. I prefer something along these lines:

my $passedprice=$query->param('price');
charge_credit_card($realprice+abs($realprice-$passedprice));
[download]

Seriously though these are important things to worry about when money or xp are involved.

vroom | Tim Vroom | vroom@cs.hope.edu