Resting in a Void

Price: $500.00

{# The view looks the piece up by pk and reads its price, title and image from the database, so product_id is the only field it needs. This form used to post `price` as a hidden input, which a client could edit to pay any amount for any piece, and it posted `product_id` twice — once as a Stripe product id, once as the page pk. The opening

tag was also never closed, so the browser swallowed the first input below into it as stray attributes. #} Purchase