Answer 1

It's enough to structure the data in a manner way, so customer couldn't manipulate the data such as prices, but to reference to it with some kind of id.
Of course there is variet tools to improve the security though