diff --git a/routes/web.php b/routes/web.php
index a24a01b..94838c1 100644
--- a/routes/web.php
+++ b/routes/web.php
@@ -33,9 +33,9 @@ Route::post('/login', [LoginController::class, "authenticate"])->name("login");
 Route::post('/register', [LoginController::class, "register"])->name("register");
 Route::any("/logout", [LoginController::class, "logout"])->name("logout");
 
-Route::post("/product/{product}/addToCart", [CartController::class, "addToCart"])->name("addToCart");
-Route::post("/product/{product}/removeFromCart", [CartController::class, "removeFromCart"])->name("removeFromCart");
+Route::post("/product/{product}/addToCart", [CartController::class, "addToCart"])->name("addToCart")->middleware("auth");
+Route::post("/product/{product}/removeFromCart", [CartController::class, "removeFromCart"])->name("removeFromCart")->middleware("auth");
 
 Route::resource("product", ProductController::class);
-Route::resource("order", OrderController::class);
+Route::resource("order", OrderController::class)->middleware("auth");
 Route::resource("image", ImageController::class)->only(["store", "delete", "create"])->middleware("auth.admin");