lilbodi wrote:
> yeah after they pay, it goes to a page (still on
securepay) that says it was
> approved, and below it has a link that takes them to the
form... which all
> works fine, but if they were to pick up on the address
up top, they can retype
> it in there next time and bypass the payment.
I'm not an ecommerce expert, so am perhaps not the best
person to
advise. However, I presume that the page the user is
redirected to is
where the purchased product can be downloaded. I have
purchased several
pieces of software and ebooks online, and the download page
is always
password protected. When I log in, it shows me links to my
products and
nothing else. If you ask users to create an account on the
site before
sending them to the payment gateway, you should have a
session variable
that indicates the user is logged in. You can protect the
download page
with the same session variable. It will still be alive after
the user is
returned from the payment gateway. If, by any chance, it
isn't, the user
will be prompted to log in again.
--
David Powers, Adobe Community Expert
Author, "The Essential Guide to Dreamweaver CS3" (friends of
ED)
Author, "PHP Solutions" (friends of ED)
http://foundationphp.com/