hacking at checkout confirmation