: ECommerce checkout security I'm developing an eCommerce site and using SagePay as a card processor. Customers will enter their delivery/invoice details into a form which is then submitted to a
I'm developing an eCommerce site and using SagePay as a card processor.
Customers will enter their delivery/invoice details into a form which is then submitted to a checkout page. This page encrypts the data and sends it over to SagePay to process the payment. No credit card details are entered or stored on my site, this is all handled by SagePay. The address details only are stored in my database.
My question is what sort of security do I need to implement ?
As I see it, my options are:
Use an SSL to provide a secure site
Encrypt the address details before insertion into the database (I'm intending to do this anyway)
Do nothing
For reference, the site is written in Coldfusion.
More posts by @Rivera981
1 Comments
Sorted by latest first Latest Oldest Best
You'll want to use SSL for any pages in the checkout process, for sure. Encrypting address data in your own database is optional. If someone were able to access your database, they'd likely be able to get your encryption key also, so that would provide little defense. Also name and address are not nearly as sensitive of information as credit card data.
Terms of Use Create Support ticket Your support tickets Stock Market News! © vmapp.org2024 All Rights reserved.