RE: Exploiting an online store

["Josh Perrymon" <perrymonj () networkarmor com>]

I know that bad programming habits exist on some of the sites out there and still use Hidden fields to pass prices 
over.. Although not very common....    I found one this morning after sending the email...
 
My question is more on the theory I suppose...  What laws are out there to protect against this after-the-fact? Is it 
true that if the seller closes the deal by sending you the merchandise then they have no case and can't go back and 
charge you?
 
Seems there should be something out there providing protection is the system is automated... Even though there should 
be checks in place people do have small budgets and rush a lot of the smaller E-com stores out.
 
JP

        -----Original Message----- 
        From: Valdis.Kletnieks () vt edu [mailto:Valdis.Kletnieks () vt edu] 
        Sent: Wed 9/14/2005 7:35 PM 
        To: Gadi Evron 
        Cc: Josh Perrymon; full-disclosure () lists grok org uk 
        Subject: Re: [Full-disclosure] Exploiting an online store 
        
        

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/