Security problems

[Liveman]

Hi

I don't know if there is a solution to this problem, anyway.

I'm building an online store. When someone enters the store I asign a token with the current recID for the new order. This works fine. The problem is that you can see the token in the address field in the browser and because I'm allowing the visitors to change their order they can also change previous orders by changing the token in address field in the browser...

please help me out!

[Vaughan]

Use a cookie rather than a token.

[Liveman]

quote:

---

Originally posted by Vaughan:

Use a cookie rather than a token.

---

Thx alot!