Thread: What are the top ecommerce website security precautions every webmaster should take?

I need some security mesures for customers on my website they will be registering there details, I want the website and customers as close to 100% sercure as possible....no payments are processed directly on the site....

How do I go about implementing a good e-security policy?

thanks for any help....

What data will you be collecting?

How will you be storing the data?

Who will have access to the data?

Will you be using SSL at all points where data is exchanged?

Is the server itself locked down fully? ie. no non-essential services running, ports open

What data will you be collecting? ........... Name, address, phone number and email!

How will you be storing the data?....... On my hosts servers, I'm guessing that's the safest place....

Who will have access to the data? Me & My Host I presume....possibly some staff in the future...

Will you be using SSL at all points where data is exchanged?....... How do I go about this, I presume I need to have an ssl when collecting there contact details? Do I need one anywhere else?

Is the server itself locked down fully? ie. no non-essential services running, ports open.........Don't know?

Originally Posted by googlebomber76

How will you be storing the data?....... On my hosts servers, I'm guessing that's the safest place....

If it's on a shared server then NO

Originally Posted by googlebomber76

Who will have access to the data? Me & My Host I presume....possibly some staff in the future...

see above

Originally Posted by googlebomber76

Will you be using SSL at all points where data is exchanged?....... How do I go about this, I presume I need to have an ssl when collecting there contact details? Do I need one anywhere else?

It gives people peace of mind

Originally Posted by googlebomber76

Is the server itself locked down fully? ie. no non-essential services running, ports open.........Don't know?

You can get it audited, but if it's a shared server it will probably fail