Shopping cart for anonymous users and it's protection -


if shopping cart stored in db both anonymous , registred users, best way protect attack? found lot of discussions store shopping carts nothing matter.

what if bot doesn't store cookies , sends requests shopping cart on , on again. without cookies it's different anonymous user every time database grow.

should check ip address , redirect captcha? real users may have same ip addresses, algorithm should more complicated not disturb them.

any ideas or links?

captcha's pretty popular way go. i'm guessing people (like me) rather dislike them , can't read them, they're pretty easy implement , more efficient alternatives.

the less effort approach checking ips having anonymous users require captcha.

i suggest having time-out (based on activity) of no more few hours on carts of anonymous users (after can delete it).

you'd want upper limit on number of items, and, if number high, possibly prevent (though captcha?) users adding many items cart in inhumanly short succession.


Comments

Popular posts from this blog

c# - DetailsView in ASP.Net - How to add another column on the side/add a control in each row? -

javascript - firefox memory leak -

Trying to import CSV file to a SQL Server database using asp.net and c# - can't find what I'm missing -