Here’s a to building a shopping cart with ASP Classic (VBScript) and a database (usually Access or SQL Server).
Session("Cart") = cart Response.Redirect("view_cart.asp") %> At checkout, copy cart to database , then clear Session: vp asp shopping cart
If Not found Then ReDim Preserve cart(UBound(cart) + 1) cart(UBound(cart)) = Array(pid, pname, price, qty) End If Here’s a to building a shopping cart with
<% ' insert into Orders table ' then insert into OrderItems table Session("Cart") = Array() ' clear cart Response.Redirect("thankyou.asp") %> | Issue | Fix | |--------|------| | Empty cart | Check UBound(Session("Cart")) >= 0 | | Negative quantity | Validate input, set min=0 | | Price tampering | Never trust price from client. Store price in DB, retrieve by ProductID | | Session expiration | Redirect to login or save cart in DB for registered users | | SQL injection | Use parameterized queries (ADODB.Command) | 9. Example product list ( products.asp ) <% Set rs = conn.Execute("SELECT id, name, price FROM products") Do While Not rs.EOF %> <form method="post" action="add_to_cart.asp"> <%=rs("name")%> - <%=FormatCurrency(rs("price"))%> <input type="hidden" name="id" value="<%=rs("id")%>"> <input type="hidden" name="name" value="<%=rs("name")%>"> <input type="hidden" name="price" value="<%=rs("price")%>"> Qty: <input type="number" name="qty" value="1" min="1" size="3"> <input type="submit" value="Add to Cart"> </form> <% rs.MoveNext Loop %> 10. Database schema (minimal) Products table id (auto) | name (text) | price (currency) Example product list ( products
productID|quantity|price|name^productID2|quantity2|price2|name2^... But a is cleaner. 2. Cart data structure (in Session) On session start ( global.asa ):
I’ll assume you want a flow. No third-party paid components required. 1. Core idea (no Session abuse) In classic ASP, the cart is often stored in Session as an array or a delimited string. Better: store cart in a Session variable as an XML string or a serialized array.