wishlist page security