diff --git a/client/src/pages/cart/components/place-order/PlaceOrder.tsx b/client/src/pages/cart/components/place-order/PlaceOrder.tsx
index 8b57792..ea6f07e 100644
--- a/client/src/pages/cart/components/place-order/PlaceOrder.tsx
+++ b/client/src/pages/cart/components/place-order/PlaceOrder.tsx
@@ -13,6 +13,8 @@ declare global {
   }
 }
 
+axios.defaults.withCredentials = true
+
 export default function PlaceOrder() {
   const cartData = useAppSelector((state) => state.cart)
   const serverStatus = useServerStatus()
@@ -36,7 +38,7 @@ export default function PlaceOrder() {
       currency: 'INR',
       name: 'RazorPay',
       description: 'Secure payment through RazorPay',
-      // image: 'https://avatars.githubusercontent.com/u/25058652?v=4',
+      // image: '',
       order_id: order.id,
       callback_url: 'http://localhost:5000/api/v1/paymentverification',
       notes: {
diff --git a/server/src/controller/payment/payment.controller.ts b/server/src/controller/payment/payment.controller.ts
index 6d0b38e..46e4211 100644
--- a/server/src/controller/payment/payment.controller.ts
+++ b/server/src/controller/payment/payment.controller.ts
@@ -6,6 +6,7 @@ import { Payment } from '../../model/payment.model'
 export const paymentVerification = async (req, res) => {
   const { razorpay_order_id, razorpay_payment_id, razorpay_signature } =
     req.body
+  const userId = req.user.id
 
   const body = razorpay_order_id + '|' + razorpay_payment_id
 
@@ -21,6 +22,7 @@ export const paymentVerification = async (req, res) => {
       razorpay_order_id,
       razorpay_payment_id,
       razorpay_signature,
+      user: userId,
     })
 
     res.redirect(
diff --git a/server/src/model/payment.model.ts b/server/src/model/payment.model.ts
index c3e32d4..6464573 100644
--- a/server/src/model/payment.model.ts
+++ b/server/src/model/payment.model.ts
@@ -14,6 +14,11 @@ const paymentSchema = new mongoose.Schema(
       type: String,
       required: true,
     },
+    user: {
+      type: mongoose.Schema.Types.ObjectId,
+      ref: 'User',
+      required: true,
+    },
   },
   { timestamps: true }
 )
diff --git a/server/src/routes/payment.route.ts b/server/src/routes/payment.route.ts
index 0fc3306..7cb04a5 100644
--- a/server/src/routes/payment.route.ts
+++ b/server/src/routes/payment.route.ts
@@ -5,11 +5,14 @@ import {
   paymentVerification,
 } from '../controller/payment/payment.controller'
 import { verifyPayment } from '../controller/payment/verifyPayment.controller'
+import { verifyToken } from '../middleware/verifyToken.middleware'
 
 const paymentRoute = Router()
 
-paymentRoute.route('/checkout').post(checkout)
-paymentRoute.route('/paymentverification').post(paymentVerification)
+paymentRoute.route('/checkout').post(verifyToken, checkout)
+paymentRoute
+  .route('/paymentverification')
+  .post(verifyToken, paymentVerification)
 paymentRoute.route('/verify-payment').get(verifyPayment)
 paymentRoute.route('/get-key').get(getKey)