|
Shopping Cart The shopping cart is the second half of the product catalog and allows clients
to select items for purchase from the product catalog.
Version 2.5 released December 2, 2001!
Changes in version 2.5 include:
- better database design for "shoppingcart" table, renamed as "shoppingcart_new" table
- no longer uses stored procedures to make it easier to use
with ms access. put the procs in yourself if you want
them. I totally recommend stored procedures!
- fully documented VBScript class
- full error and exception handling
- more robust internal design, all problems from
version 2.0 are repaired
- you only need to set the database connection information
in one place
- all security issues repaired from version 2.0. these
include:
- no longer using hidden form inputs for pricing
- pricing is determined at runtime. the only things
the class exposes as hidden form inputs are
the quantity selected and the id of the product
or cart item selected.
- the software can no longer be spoofed into
computing an arbitrary price for a product
in a cart
- unknown products can no longer be added to
the catalog via the add mechanism.
- i'm sure there were other issues as well.
they should all be fixed in version 2.5.
This cart is a lot tighter from a security
standpoint.
Your cart is currently empty.
To add an item select
the add to cart link below the product you
wish to purchase. Putting an item in your
shopping cart does not obligate you to purchase
anything.
|
