|
|
|||||||||
|
|||||||||
| |||||||||
|
|
|
| |||||||||
![]() |
|
|
«
Previous Thread
|
Next Thread
»
|
Thread Tools | Search this Thread | Rate Thread | Display Modes |
|
|
|
SlickEdit: Code in over 40 languages across 7 platforms. SlickEdit’s unmatched power, speed, and flexibility allows even the most accomplished developers to write better code faster. Download a free trial today! |
|
#1
|
|||
|
|||
|
Order security
Is there any way that i can secure my order page? Like
https://www.mypage.com/cart/ thanks, fangore |
|
#2
|
||||
|
||||
|
I assume you already have https enabled? Beyond that, there are a couple of things:
You need to ensure the webpage was designed securely, ie, the code of the backend language that manages your database etc isn't vulnerable to injections, etc. The guy who wrote your webpage to begin with might be a good person to start with. You need to ensure your web server software is configured correctly. If you use Apache, you need to ensure that you have the latest security patches, that you do not have bad configurations, etc. For this you need someone with expertise with your specific server software. You need to ensure that your web server, the machine itself, is secure. Ensure it has the latest security patches, there are no extra services running that a hacker could exploit, you have permissions and configurations set up properly, etc. For this you need someone with expertise with your OS (Linux, Windows, OpenBSD etc). Sorry, there are no "do X and Y" steps to give, you just need a trained eye to evaluate those three aspects of your web service and comb them over.
__________________
- "Cryptographically secure linear feedback shift register based stream ciphers" -- a phrase that'll get any party started. - Why know the ordinary when you can understand the extraordinary? - Sponsor my caffeine addiction! (36.70 USD recieved so far -- Latest donor: Mark Foxvog) |
|
#3
|
|||
|
|||
|
I am the guy who writes the page, just new in keys / ssh
|
|
#4
|
||||
|
||||
|
Quote:
Not sure what you are asking that B-con didn't address. If your host has SSL setup, just change the URL to your order page to HTTPS and you are started. Is that what you are asking? Or are you asking about how secure is it after you use SSL? Again, B-con has covered the high level information. How secure is secure? Pretty much there is no such thing as absolute security. But there are things you can do to make a system more secure. SQL injection, cross site scripting are among the many bad things that can happen. |
![]() |
| Viewing: Dev Shed Forums > System Administration > Security and Cryptography > Order security |
| Thread Tools | Search this Thread |
| Display Modes | Rate This Thread |
|
|
|
|