I believe it is but I wanted to ask what others think about a script that asks for the user's transaction ID of their order. I always get a lot of emails when someone would ask "I paid for such and such service did you get the payment?" without providing any details to who they are or anything other useful information. I have used a contact form for years but now I am working on a helpdesk script. My question to you is do you think it would be ok to ask for their transaction ID number in the ticket? For the most part the script is secure but just in case someone were to obtain some one's transaction ID from PayPal or 2CO, they wouldn't be able to do much with it right? Thanks.
Ok, just in case noone understands my question, I am basically asking if you think it is safe to store transaction ID numbers on a site. If someone were to come across someone's transaction ID they would not be able to abuse it in any way correct? Thanks.