Building a Shopping cart the smartest way posible

perrohunter

hi !

Im planning to build a shopping cart (I know I should use an already made solution)

However as always I have some questions about this issue. When coming to think about if I should keep with the 100% server-side schema or should I go into a 90% client-side schema-10% server-side schema

By this I mean , is it a good idea to handle the whole cart process on the server or should I try to make the client do the process himself.

If the server do the whole process it would spare resources everytime someone adds an item or edit/delete items on the cart

If I go with the client side solution It would be like having a JS that hold the items till checkout.

I'm mainly worried about the client, however I do care about server load

What are your oppinions ?

dagon

you can never trust the client with anything, so i would never put anything in there hands, espically when dealing with money.

Desdinova

on the other hand, if you make sure nothing can go wrong on your side, it's a good option. If people mess around with the script, trying to sabotage your webshop or something, it shouldn't bother you at all. Everything they try to alter should be in their disadvantage.

knowj

NEVER rely on client side under any circumstances.

java-script should be there to enhance the user experience not to form key functionality of the site.

Desdinova

I disagree.

Just make sure non-js users can shop as well.

If security is taken care of serverside, and the js is good (as in not buggy), there shouldn't be a problem at all. Not saying I'd recommend it, but it should not be a problem.

Xager

What you could do is store an ID of each item in the cart in the client and just check if each ID is valid, should eliminate any scams.

Desdinova

exactly 🙂

all data you keep in js should be just used to speed things up (prices, article names, amounts, etc). As soon as you proceed to the checkout, you take all productIDs plus the amounts, and recalculate the totalprice. If they screwed around with the js cart, it will be corrected here. Hell it won't even matter if the cart still looks like the way they editted it, as long as the 'to pay' price is right. People who tinker the code should not get any support whatsoever, don't fix what they broke for themselves, just make sure they don't break anything that will influence you.