* Parse REQUEST_URI with tep_db_prepare_input() before storing the value in the database
* Replace REMOTE_ADDR with tep_get_ip_address()
Remove session_decode() code - only show shopping cart contents of logged in customers