ShopSite Forums

This is old news but I came across the actual article regarding form
tampering - the potential ability for customers to reduce prices in the
order form, clearly without the merchants knowledge. See
http://www.iss.net/security_center/alerts/advise42.php

Since shopsite is not mentioned can we assume that this is not relevant for
us.

Richard.
www.shoplite.com

Yes, you may assume (correctly) that ShopSite does NOT have this vunerability.
This problem occurs in shopping carts that allow the price to be passed from
the HTML source (PayPal's shopping cart is one example of this). ShopSite, on
the other hand, retrieves the price information from the product database, so
it does NOT allow shoppers to change the price simply by modifying the HTML.

-Loren


"shoplite.com" wrote:

This is old news but I came across the actual article regarding form
tampering - the potential ability for customers to reduce prices in the
order form, clearly without the merchants knowledge. See
http://www.iss.net/security_center/alerts/advise42.php

Since shopsite is not mentioned can we assume that this is not relevant for
us.

Richard.
www.shoplite.com