This setup assumes manual order fulfillment. If someone manipulates a charge, don't deliver the goods.

If you're doing 100s of transactions per day or automating fulfillment, it would be more appropriate to invest in a full-featured back end.