Tell me it is not how it looks like, simpleCart (opens in new tab)

(screenr.com)

5 pointssamzhao14y ago6 comments

I just found a crazy little bug in the Javascript shopping cart plugin, simpleCart.js. I am a javascript noob. I do a lot of jQuery code writing and debugging at this stage, and I use Google Chrome. I found that if you change the price tag of any item using Chrome's "Inspect Element", you can purchase that item at any price you change it into. I don't know if there's something wrong with the demo shop, or the plugin itself is broken. Can some pros tell me if there's really something wrong?

Tell me it is not how it looks like, simpleCart

(screenr.com)

5 pointssamzhao14y ago6 comments

6 comments

4 comments · 1 top-level

marvinkennis14y ago· 3 in thread

Last time I checked this actually worked in production as well, as the values are changed before the form is submitted and no data is pulled from a server to validate. So SimpleCart should be used for low traffic websites, where orders are manually inspected, as they said on their github page https://github.com/wojodesign/simplecart-js/issues/150

samzhaoOP14y ago

Is getting information from JSON going to solve the problem at all? I like the simplicity of simpleCart, and I do a lot of front-end stuff. With simpleCart, I don't have to write a huge chunk of server side scripts and correspond the back-end with the front-end. I can just add a few classes in my html and simpleCart is going to do the magic.

cjfont14y ago

Manually inspecting the price of each purchase, as an alternative to doing a server-side check? That would be the equivalent of being able to change the price associated with a product barcode and asking cashiers to verify the prices for everyone's purchases.

marvinkennis14y ago

Ha, I know. I wasn't stating my own opinion there though. Adding in a server-side check seems to be the only way to solve this (Note: My knowledge on this subject is limited), but doing so removes the advantage they have, which is the easy implementation. This would be cool if it worked flawlessly, but then again, it doesn't (yet).

1 more reply

j / k navigate · click thread line to collapse