Does the product_id have to be there though? What if I've no way of knowing what they're intending to buy?