Question

i’m attempting to make a purchase ordering system for work in php, mysql and jquery. I’ve got a “running total” working great but i’ve come to the point where if the user is happy and wants to proceed to order the products they’ve selected i want to take the items at the bottom of the screen (attached picture to see what i mean) and send the values to a php script which will insert them into a db called “orders”. what i imagined happening was they press “save” and jquery grabs all the values from the rows in the table at the bottom and sends them via “GET” to the waiting PHP, the php would insert all data it receives into the db, all with a unique “id” so people can pull back orders at a later date…I know what i want to do but i’m struggling to plan out the specific mysql querys/jquery stuff! Any help appreciated!

Answer 1

I wouldn’t trust the data in the table enough to pull the running total or list prices back from it. A user with firebug for example could easily lower the price of their order.

You really want to store the cart in the users session so you can maintain an accurate account of the total on the server side with prices you can trust because the user cannot change them. Never trust data coming back from the front end. When the user adds an item to the cart ask the server for the price by product_id rather than using jQuery to grab it from the DOM.

When the user submits an order you don’t pass anything using jQuery you just trigger a PHP script that will use the cart stored in the session to process the order.