escape javascript
add order model, create 'Checkout' form