Securing order pages

Basic

• Do not show personal information when it is not necessary.
• Use $field->escape() for all user generated data.
• Make sure order page links don’t appear in a sitemap or similar list of pages.
• Make sure order pages are excluded from search results, when using $site->search() or similar.
• Add a robots meta tag to prevent search engines from crawling order pages.
  <meta name="robots" content="noindex, follow">
• Add a robots.txt to disallow order pages. (Your /orders/ path can be different depending on your ordersPage option)

User-agent: *
Disallow: /orders/

Advanced

• Prevent the use of $orderPage->siblings() or similar.
• If you use Git: make sure order pages are not included in your (public) Git repository.

Further considerations

• Only show the order page with a valid hash as suggested by @bruno.
• Create a log entry each time an OrderPage is rendered. You could overwrite the OrderPage::render() method.
• Add a method to detect/prevent brute force attacks.
• Only send one-time, hashed order page links, which are only valid for a short period of time. (self destroying link)
• ”Deactivate“/“Unpublish” the order page after a short period of time as suggested by @Philip.

Further reading

Kirby Security Advices