I'm using the following form on the cart/checkout page for a store I'm putting together:
Quote:
<form action="https://www.paypal.com/cgi-bin/webscr" method="post" style="width: 100%;">
<input type="hidden" name="cmd" value="_cart">
<input type="hidden" name="business" value="[email protected]">
<input type="hidden" name="affiliate_id" value="XXXXXX">
<input type="hidden" name="upload" value="1">
<input type="hidden" name="item_number_1" value="603">
<input type="hidden" name="item_name_1" value="Product Name">
<input type="hidden" name="amount_1" value="9.99">
<input type="hidden" name="quantity_1" value="1">
<input type="hidden" name="currency_code" value="USD">
<input type="hidden" name="no_shipping" value="1">
<input type="hidden" name="return" value="http://www.domain.com/store/success.php">
<input type="hidden" name="cancel_return" value="http://www.domain.com/store/cancel.php">
<input type="hidden" name="notify_url" value="http://www.domain.com/store/ipn_listener.php">
<button type="submit" class="get_btn">Proceed to Checkout</button>
</form>
|
In your opinions, is it better to hide this data from the HTML code for security reasons? Like, is there any reason it shouldn't be, is it simple for someone to use the data fraudulently if its not hidden from view?