RE: Purchased cart being overwritten
This WebDNA talk-list message is from 1997
It keeps the original formatting.
numero = 13193
interpreted = N
texte = Rob ->On a store I am just completing, when the customer clicks purchase after>entering his credit card info a thankyou.tmpl page is returned and the cart>file is transferred to the Orders folder. A context on the top of the>thankyou.tmpl logs the order into an orders database from which the order>can then be managed.>After performing a purchase, I backed up in my browser, both IE and>Netscape to a shopping page. Admittedly my cart was empty but the same cart>number was in the url. I then continued shopping, and another cart file was>generated with the same number as the previous one (now residing in the>Orders folder). I then shopped around and concluded my purchase and this>new cart was then transferred to the orders folder and overwrote the>earlier one. This is a serious problem which could cause a serious loss if>someone did this. Can anyone point me to a solution for this?If you are worried about people backing up this far and reordering, you can just use some [showif] checks to present them with a message that this cart has already been submitted, and give them a $newcart link instead of allowing them to shop with that cart again. You could either use [showif] in conjunction with [listfiles] to check for the existence of that cart in the Orders folder, or, more conveniently (since you already have the orders database set up) you can do a [lookup] in your orders database to see if that cart number has already been ordered.Alternatively, you could make all links between pages form buttons using METHOD=POST; this wouldn't prevent them from backing up and using the same cart, but it would make it more difficult.I hope this helps,Marc EagleStarNine Technologieshttp://www.smithmicro.com/
Associated Messages, from the most recent to the oldest:
Rob ->On a store I am just completing, when the customer clicks purchase after>entering his credit card info a thankyou.tmpl page is returned and the cart>file is transferred to the Orders folder. A context on the top of the>thankyou.tmpl logs the order into an orders database from which the order>can then be managed.>After performing a purchase, I backed up in my browser, both IE and>Netscape to a shopping page. Admittedly my cart was empty but the same cart>number was in the url. I then continued shopping, and another cart file was>generated with the same number as the previous one (now residing in the>Orders folder). I then shopped around and concluded my purchase and this>new cart was then transferred to the orders folder and overwrote the>earlier one. This is a serious problem which could cause a serious loss if>someone did this. Can anyone point me to a solution for this?If you are worried about people backing up this far and reordering, you can just use some
[showif] checks to present them with a message that this cart has already been submitted, and give them a $newcart link instead of allowing them to shop with that cart again. You could either use
[showif] in conjunction with
[listfiles] to check for the existence of that cart in the Orders folder, or, more conveniently (since you already have the orders database set up) you can do a
[lookup] in your orders database to see if that cart number has already been ordered.Alternatively, you could make all links between pages form buttons using METHOD=POST; this wouldn't prevent them from backing up and using the same cart, but it would make it more difficult.I hope this helps,Marc EagleStarNine Technologieshttp://www.smithmicro.com/
Marc Eagle
DOWNLOAD WEBDNA NOW!
Top Articles:
Talk List
The WebDNA community talk-list is the best place to get some help: several hundred extremely proficient programmers with an excellent knowledge of WebDNA and an excellent spirit will deliver all the tips and tricks you can imagine...
Related Readings:
Extra carriage returns (1999)
New Guy (2000)
Smart caching problems with 2.1b3? (1997)
[BULK] [WebDNA] Are your sandbox prefs broken? (If not, are (2011)
[taxRate] [TaxTotal] ? (1997)
Re:no [search] with NT (1997)
no template caching (1997)
Snake Bites (1997)
WebCatalog for guestbook ? (1997)
String manipulation in Webcatalog (2001)
Help name our technology! I found it (1997)
triggers have stopped once again (2002)
Db crash in win98 (2000)
WC2f3 (1997)
Price Not Appearing (2000)
Protect usage (1999)
Requiring that certain fields be completed (1997)
Issues with the default db files ... (2003)
Only charge card when product shipped ? (1997)
Special characters in field names (1998)