validating html, charset
set session path ad sanitise price input
menu above content
not a real site message