Re: secure form handling
| From: | CC Zona | Date: | Thu, 07 Feb 2002 05:28:08 +0000 |
| Subject: | Re: secure form handling | ||
| References: | 1 2 3 4 5 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-83811@lists.php.net to get a copy of this message | ||
In article <3C61FB88.7CF79A5C@blanktv.com>, webmaster@blanktv.com (Wm)
wrote:
> Cc Zona wrote:
>
> > In article <3C61F613.4FEFCC8F@blanktv.com>, webmaster@blanktv.com (Obo)
> > wrote:
> >
> > > > Sorry, perhaps I've misunderstood. You would like to charge a
> > > > customer's
> > > > card without the customer knowing how much you're charging them?
> >
> > > i want the user to be able to see the amount being charged on the
> > > screen, but not to be able to view it in a hidden field in the source
> > > code. most shopping cart applications are like this.
> >
> > What would be the point of that? If they can see it onscreen anyway (as
> > they should), why hide it in the source?
> >
> > Could you point out some URLs where there are shopping carts like this?
> amazon.com
> vitaminworld
Many shopping carts track persistent data (including running totals) via
cookies. If you just want to know *how* to do what they do, the short
answer is "cookies" <http://php.net/sessions>
<http://php.net/set-cookie>.
But I doubt any of them are doing so with the *intent* to prevent onscreen
data from being viewable in the source.
--
CC