How Do I Make My Store Secure?

[tyde]

I'm a new osCommerce user. Pretty new to the e-commerce world as a whole, but am pretty comfortable with web development terms. So any help is appreciated.

 

Okay, I want my customers to feel safe purchasing items from my store. How do I "secure" my store, without having to purchase a certificate that costs an arm and a leg? My store hasn't gone live, yet, as this is a new business.

 

Do I have to purchase a module? Or do I just have to pay another person, so I can display a little logo on my store? If so, what's my cheapest and most reliable option?

 

What did you do when you first started?

 

Thanks.

[Guest]

Purchase a certificate. They don't cost an arm & leg.

[Gauravs]

OSCommerce has been designed to address security conerns. While display of contents on your cart don't have to be encrypted, it is essential that any data entered by user doesn't get sniffed over the network while it is getting transferred from client machine to your server / store.

To enable SSL in your cart, is really a straight forward process.

a. buy certificate.

b. Install Certificate (generally your web host would do the installation)

c. Modify configure.php in /includes and /admin/includes to declare that you would use SSL feature. The key to modify is ENABLE_SSL and you have to make it true from default value of false.

define('ENABLE_SSL',true);

 

That is it. To test if site has become secure, on your cart home page, if you keep your mouse over My Account or Checkout, the links in status bar should show https://yoursite.com/... instead of http://yoursite.com/...

 

HTH

[joannemojo]

I've just bought a SSL from my host for $78 per year. This includes installation and dedicated IP. GoDaddy has them for $14.99 right now which seems like a good deal but that doesn't include the dedicated IP etc. When thats added it came to $74 on my host ($30 for IP and $30 for installation). Decided to go with one offered on my host. Am waiting for my domain to propagate right now.