dezkit Posted June 12, 2010 Share Posted June 12, 2010 Hey guys I had created a while ago a script for my friend where you can buy points and then redeem stuff with those points, i'm looking for ways to keep my site secure: currently what i have done- - protected all mysql queries with mysql_real_escape_string, strip_tags, and addslashes - have a valid SSL certificate on my website - checked if emails are valid for account creation what else can I do? Thank you. Link to comment https://forums.phpfreaks.com/topic/204610-how-to-make-a-secure-e-commerce-website/ Share on other sites More sharing options...
dezkit Posted June 12, 2010 Author Share Posted June 12, 2010 should i also put strip_tags to all user submitted inputs to prevent xss injection? Link to comment https://forums.phpfreaks.com/topic/204610-how-to-make-a-secure-e-commerce-website/#findComment-1071295 Share on other sites More sharing options...
sKunKbad Posted June 13, 2010 Share Posted June 13, 2010 You should also be validating all form input during account creation, the checkout process, or anytime a form is submitted. For instance, for a field that is supposed to be completely alpha characters, you should be checking that there aren't numbers, punctuation, etc. Link to comment https://forums.phpfreaks.com/topic/204610-how-to-make-a-secure-e-commerce-website/#findComment-1071318 Share on other sites More sharing options...
theITvideos Posted August 4, 2010 Share Posted August 4, 2010 Hey guys I had created a while ago a script for my friend .... - have a valid SSL certificate on my website .... Hi dezkit, You mentioned you have a valid SSL on your website. I have 2 questions: [*]Which company is the best for SSL certificate. [*]And once we get the SSL certificate, how do we install it on our specific pages. Kindly reply dezkit. Thanks! Link to comment https://forums.phpfreaks.com/topic/204610-how-to-make-a-secure-e-commerce-website/#findComment-1095207 Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.