How about turning the problem round?

Write the db so that when the body shop updates the record, an email is sent to the customer with the updated info?

I have written my Form application in this way. When a record is created either or both of the Admin or Customer gets an email and an html file with a unique name is created and saved on the server. You can easily determine what info is put in the html file.

The customer can click the link provided in the email and see the record. The same thing happens every time the record is updated.

No need then for the customer to log in.
-------------
David Olley
Anglo & Foreign International Limited,
http://www.firehelmets.co.uk

There are 10 types of people in the world: those who understand binary, and those who don't.