Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

We just completed functionality testing of our new e-commerce site and going to launch.We are accepting credit card payments. I'm really concerned about it's security.What are the precautions to be taken? I'm not so good at web security. Please advice.

share|improve this question

closed as too broad by Adnan, NULLZ, Gilles, Xander, TildalWave Aug 30 '13 at 14:38

There are either too many possible answers, or good answers would be too long for this format. Please add details to narrow the answer set or to isolate an issue that can be answered in a few paragraphs.If this question can be reworded to fit the rules in the help center, please edit the question.

5  
I'm glad that you are at least concerned about security, but for the love of all that is holy, HIRE A PROFESSIONAL SECURITY CONSULTANT. I'm not trying to offend you or be rude, but there is no other practical alternative if your going to be handling other peoples money. –  NULLZ Aug 30 '13 at 7:14
2  
Use an existing payment service provider to handle taking card details; keep them out of your own systems at all costs. –  bobince Aug 30 '13 at 8:38
    
> Use an existing payment service provider +1 –  that guy from over there Aug 30 '13 at 14:21

1 Answer 1

up vote 4 down vote accepted

Yeah.... you don't do something like that yourself when "I'm not so good at web security." Have a look at PCI-DSS and the horrible horrible things that you can be liable for if you don't do things properly.

Instead, you should use something like Authorized.net to take care of handling that part for you.

Also, I really hope that you are using an existing e-commerce solution instead of writing your own. The amount of things that you can screw up when you have no idea what you are doing is so scary it's not even funny.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.