Re: [PHP] ecommerce related question

2009-01-13 Thread tedd

At 3:58 PM +1030 1/13/09, Travis Moore wrote:
Firstly, not really a php question, but generic web stuff, but I 
feel it's still better answered here.


Recently a friend came to me asking to create an ecommerce website. 
In the past my php work has been primarily a hobby, and as such 
haven't really taken much interest or effort into security aspects 
of it.


Given the nature of the project, I realise security is a must. My 
question is: what recommended reading for security or ecommerce can 
any of you suggest?


--
Thanks,
Travis Moore
tra...@live.com OR trabus2...@gmail.com



Travis:

I could write a treaties on ecommerce security problems and not cover 
everything.


My recommendation for a hobbyist php developer is to contact PayPal; 
establish an account with them; and have them do all the collections.


You prepare the site to sell items and do what PayPal says needs to 
be done. That will work well enough for a successful operation.


If you are thinking about collecting credit card information and 
processing transactions yourself, you had better have the business as 
a corporation to protect your personal assets (if you are in the 
USA), because things could get out of hand very quickly. That's a 
dangerous road to travel.


Cheers,

tedd
--
---
http://sperling.com  http://ancientstones.com  http://earthstones.com

--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



Re: [PHP] ecommerce related question

2009-01-13 Thread ceo

For now, as already said, go with PayPal or similar.



Do not store the CC#s in your DB or anywhere at all, for any length of time.  
Not in the SESSION either. Get it and send it to PayPal and wipe it out with 
http://php.net/unset all in one single HTTP request.



For long-term, to learn more, start reading here:

http://phpsec.org/



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



[PHP] ecommerce related question

2009-01-12 Thread Travis Moore
Firstly, not really a php question, but generic web stuff, but I feel it's 
still better answered here.


Recently a friend came to me asking to create an ecommerce website. In the 
past my php work has been primarily a hobby, and as such haven't really 
taken much interest or effort into security aspects of it.


Given the nature of the project, I realise security is a must. My question 
is: what recommended reading for security or ecommerce can any of you 
suggest?


--
Thanks,
Travis Moore
tra...@live.com OR trabus2...@gmail.com 



--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php