I'm creating a page where a customer can edit their order before they pay for it. The page will delete as soon as the order is paid for, but what's the best way to protect against email/phone number collecting bots? It needs to contain the email address and/or phone number. There is no way around that. (Shipping address also.)
Although the page will expire within minutes in most cases, I still want a customer to be safe if they choose to place an order now and pay for it several months later. (The nature of my business is that knowing what you would like to order may take a bit of effort and research, which a customer would not want to repeat if they decide to delay their order until they can afford to pay for it.)
Also, the site currently has no log on system. I will develop one eventually, but even once I do, I always want anonymous purchasing to be an option. A customer should be able to edit their order at any time from the link emailed to them without creating a username/password.
Before I had this concern, I was going to have it be
www.domainexample.com?id=7, but any bot could check
id=5 to see if they've been shipped yet, and
id=8 to see if there is a new order yet.
How can I provide a similar level of protection against email address theft that larger more professional sites like eBay would offer? (If that's even possible with anonymous purchasing. I hope it is.)
Important detail I forgot to mention. The target audience is old ladies that can barely use a computer at all. Any security feature that impacts the user experience could cost hundreds of dollars in missed sales as the website becomes too intimidating to use.