Forum Moderators: phranque
[infoworld.com...]
It discusses a flaw in a manufacturers shopping cart implementation and their "solution" to the bugs in their system.
Essentially they created a cart which was capable of passing all data to the client in the form of a cookie, since this included the final pricing information there is an obvious problem if the client can manage to modify this data they can then set their own prices.
However more interestingly it also highlights what is quite a wipespread and serious problem when people who don't undertstand the technology design shopping carts (if we are honest most IT/internet professionals will have seen a variation on this theme at least once in a commercial product).
- Tony
