Title: Potential privacy issue
Last modified: October 2, 2022

---

# Potential privacy issue

 *  [darnpunk](https://wordpress.org/support/users/darnpunk/)
 * (@darnpunk)
 * [3 years, 9 months ago](https://wordpress.org/support/topic/potential-privacy-issue/)
 * Hello! The idea of multi cart is interesting!
 * I was testing out and realised that the “Select Cart” button has a URL of /cart/?
   cart_session_set={ID}. The ID now is a running number and if I load the URL in
   another browser, it loads the cart data with all the information.
 * As it is a running number, it may be easy for anyone to keep on trying to load
   the saved cart of another user which could contain their billing address, shipping
   address etc.
 * It would be better to use a unique hash to reference the cart data instead (e.
   g. /cart/?cart_session_set={unique-hash}) to prevent stealing of data via enumeration.

Viewing 1 replies (of 1 total)

 *  [valuebg](https://wordpress.org/support/users/valuebg/)
 * (@valuebg)
 * [3 years, 9 months ago](https://wordpress.org/support/topic/potential-privacy-issue/#post-16114012)
 * Any update on this? I’m deciding between this plugin– which seems like a great
   start. Or creating the functionality myself.

Viewing 1 replies (of 1 total)

The topic ‘Potential privacy issue’ is closed to new replies.

 * ![](https://ps.w.org/multiple-carts-for-woo-free-by-wp-masters/assets/icon-256x256.
   png?rev=2756524)
 * [Multiple Carts, Persistent Carts, Abandoned Carts, MultiVendors for Woo - Free by WP Masters](https://wordpress.org/plugins/multiple-carts-for-woo-free-by-wp-masters/)
 * [Support Threads](https://wordpress.org/support/plugin/multiple-carts-for-woo-free-by-wp-masters/)
 * [Active Topics](https://wordpress.org/support/plugin/multiple-carts-for-woo-free-by-wp-masters/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/multiple-carts-for-woo-free-by-wp-masters/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/multiple-carts-for-woo-free-by-wp-masters/reviews/)

 * 1 reply
 * 2 participants
 * Last reply from: [valuebg](https://wordpress.org/support/users/valuebg/)
 * Last activity: [3 years, 9 months ago](https://wordpress.org/support/topic/potential-privacy-issue/#post-16114012)
 * Status: not a support question