i think there is an issue when visitors add Products to a shopping cart.

the product id is passed to the addtocart.aspx page from the query string.

so easily anyone that know a few things about programming can type the url
on the address bar and pass any number to the addtocart.aspx.

and if the product id exists in the table products it will add it to the shopping cart. when it does not exist then an error is displayed.i think this is due to the fact that there is a foreign key constraint in the database.

untill now nothing is too serious and it will not harm anything.

but i faced a problem when i modified the products table to have another field that states if the product has been sold or not.its type bit and i set it on when a product has been sold.

so i have a list of all the products.some are for sale and some are sold.

but now if the user type the url addtocart.aspx?productid='a product tha has been sold' the prooduct is added to the shopping cart as well.

what other options do i have to implement a shopping cart.?
what are your comments about the way the commerce starter kids handle this?

thanks

The starter kit is just that - A Starter.

If you don't want to add an item that is sold out to the cart then you will need to do a check in the logic that adds items to the cart for qty available. Then decide to add or not.

TIM

---