Snipcart

Post by karolisd » Thu, Jul 25, 2013, 4:22 PM UTC

Post by tyleregeto » Thu, Jul 25, 2013, 4:33 PM UTC

karolisd wrote: post #2

I'm confused, is the price actually stored in the DOM?

Post by charles_ouellet » Thu, Jul 25, 2013, 4:38 PM UTC

wodow wrote: post #5

arcameron wrote: post #3

So, as a web developer, I'm not seeing anything that would inspire confidence regarding someone simply inspecting & changing this data attribute to: data-item-price="0.01" I skimmed through the documentation, but didn't see any real mention of this concern. I think it should be highlighted. Seems that by allowing it to be in markup it might encourage people to be negligent and perhaps miss verifying that the submitte…

Presumably they crawl the website on signup and watch out for major changes in price like that? But, yes, if that's the case then that should be highlighted in the docs.

Post by charles_ouellet » Thu, Jul 25, 2013, 4:44 PM UTC

tyleregeto wrote: post #4

karolisd wrote: post #2

I'm confused, is the price actually stored in the DOM?

Yes, in the documentation they are selling that as a feature. One of the Snipcart's strength is that you do not have to enter your product inventory anywhere. Most of the time you will always have an inventory somewhere or an existing database, so we did not want to have you duplicate information. So how does it work? All your product information is stored in the HTML markup. Kind of a major oversight. I don't really…

Post by greenpizza13 » Thu, Jul 25, 2013, 4:45 PM UTC

charles_ouellet wrote: post #6

wodow wrote: post #5

Earlier quoted context omitted.

Presumably they crawl the website on signup and watch out for major changes in price like that? But, yes, if that's the case then that should be highlighted in the docs.

We crawl the page that you specify within the data-item-url attribute. We validate that no product informations has been altered. If so, we simply ignore the order and nothing is charged or processed.