Vp Asp Shopping Cart -

Session("Cart") = cart Response.Redirect("view_cart.asp") %> Same as update with qty=0, or simpler:

cart = Session("Cart") found = False

<% Dim idx, cart, i idx = Request("idx") cart = Session("Cart") For i = idx To UBound(cart) - 1 cart(i) = cart(i + 1) Next ReDim Preserve cart(UBound(cart) - 1) vp asp shopping cart

order_id | user_id | order_date | total

If Not found Then ReDim Preserve cart(UBound(cart) + 1) cart(UBound(cart)) = Array(pid, pname, price, qty) End If Session("Cart") = cart Response

<% ' insert into Orders table ' then insert into OrderItems table Session("Cart") = Array() ' clear cart Response.Redirect("thankyou.asp") %> | Issue | Fix | |--------|------| | Empty cart | Check UBound(Session("Cart")) >= 0 | | Negative quantity | Validate input, set min=0 | | Price tampering | Never trust price from client. Store price in DB, retrieve by ProductID | | Session expiration | Redirect to login or save cart in DB for registered users | | SQL injection | Use parameterized queries (ADODB.Command) | 9. Example product list ( products.asp ) <% Set rs = conn.Execute("SELECT id, name, price FROM products") Do While Not rs.EOF %> <form method="post" action="add_to_cart.asp"> <%=rs("name")%> - <%=FormatCurrency(rs("price"))%> <input type="hidden" name="id" value="<%=rs("id")%>"> <input type="hidden" name="name" value="<%=rs("name")%>"> <input type="hidden" name="price" value="<%=rs("price")%>"> Qty: <input type="number" name="qty" value="1" min="1" size="3"> <input type="submit" value="Add to Cart"> </form> <% rs.MoveNext Loop %> 10. Database schema (minimal) Products table id (auto) | name (text) | price (currency) Database schema (minimal) Products table id (auto) |