your method is not very... safe, if you will. Because the buyer can just change the URL to give them whatever time they want, in return, giving them more time to do what ever you dont want them to do.