The useful starting point
A working cart needs records and prices you can trust.
Start with the right information
Keep stable product identifiers and server-owned prices. Recalculate totals on the server rather than trusting submitted browser amounts.
Put it into practice
Treat customer-entered payment references as unverified until checked. Keep payment status distinct from order and delivery status.
Check before you share
Make history, exports and contact details easy to find. Test the visitor journey after meaningful catalogue or checkout changes.
Original guidance for this installation. Connected services, available formats and prices are shown in the workspace before you use them.