Using ProductCart - SSL checkout.asp login

Print Page | Close Window

SSL checkout.asp login

Printed From: ProductCart E-Commerce Solutions
Category: ProductCart
Forum Name: Using ProductCart
Forum Description: Running your store with ProductCart
URL: https://forum.productcart.com/forum_posts.asp?TID=2748
Printed Date: 27-February-2025 at 2:08pm
Software Version: Web Wiz Forums 12.04 - http://www.webwizforums.com

Topic: SSL checkout.asp login

Posted By: inetbizo
Subject: SSL checkout.asp login
Date Posted: 20-May-2009 at 5:12pm

When a customer lands on ProductCart/pc/checkout.asp to sign in, how do we make this force to https protocol for secure login?

-------------
Current Project http://canvasusa.com - http://www.canvasusa.com

Replies:

Posted By: JoltDigital
Date Posted: 20-May-2009 at 5:19pm

Please refer to http://wiki.earlyimpact.com/productcart/settings-general - http://wiki.earlyimpact.com/productcart/settings-general under SSL settings.

-------------
http://www.joltdigital.com/host_pc.asp - JoltDigital Inc.
1-888-785-5658
Premium ProductCart Hosting

Posted By: Greg Dinger
Date Posted: 20-May-2009 at 5:19pm

settings, store settings.

Switch to secure page at:
Registration/Login

-------------
GreyBeard Design Group

Certified ProductCart Developer

Web Design/Development/Hosting

http://tinyurl.com/5c8t4t" rel="nofollow - Add-Ons & Custom Code |

Posted By: katharina
Date Posted: 21-May-2009 at 8:07pm

I like to start off a small discussion on this top. Does it have advantage to go secure on checkout pages before getting to the credit card page? It does slow down the pages and is it necessary to have address information encrypted. It will not be encrypted in the database anyway. On the other hand we had customers who thought our site is not secure since they don't see the lock on those pages. I feel it is only really needed for the credit card page. What do you guys think, and what other arguments are there to think about. Always open for new insights.

-------------
Katharina
*******************
www.GermanPlaza.com
*******************

Posted By: ProductCart
Date Posted: 23-May-2009 at 9:21am

Hi Katharina,

whenever there is confidential information, that information should be transmitted over the HTTPS protocol so that it is transmitted in an encrypted format.

A user password is confidential information (customers' passwords are stored encrypted in the customers table in the store database). So it is best to setup ProductCart so that it switches to HTTPS at login/registration, and not just on the payment step.

-------------
The ProductCart Team

Home of ProductCart http://www.productcart.com" rel="nofollow - shopping cart software

Posted By: intour
Date Posted: 25-May-2009 at 3:16am

From a personal point of view I prefer to see HTTPS at the point where I enter my personal details when buying online.

Whilst I do suggest this to my customers for their online shops many decide that it is fine to do this at the credit card entry stage only and it does not appear to have any adverse effect on their sales.

Nigel

-------------
http://www.innerview.co.uk - Innerview
Productcart Platinum Reseller
Web Design/Hosting/Virtual Tours

Posted By: Guests
Date Posted: 27-May-2009 at 8:54pm

Two points to consider:

Anything that might make a prospective customer squeamish about interacting or purchasing from your site should be avoided. Customers will feel more secure if their login is secured by SSL/https
According to Payment Card Industry Data Security Standards (PCI DSS), logins should be secured by SSL/https

I honestly can't see any reason not to secure the login page via SSL.