Security considerations for my first eStore.
- by Rohit
I have a website through which I am going to sell few products. It is hosted on a simple shared-hosting and does not have SSL.
On the products page, each product has a Buy Now button created from my PayPal Merchant account. PayPal recommends to use it's Button Factory to create secure buttons and save it inside PayPal itself. I have followed the same advice and the code of any button is secure and does not disclose any information on either a product or it's price.
When the user clicks on a Buy Now button, he/she is taken to PayPal site where a page is opened in SSL for the user to fill in the credit card and shipping details. After a successful transaction, the control is passed back to my site.
I want to know whether there is still any chance when security could be compromised.