Security

[djmonkey1 0]

So, my sites all set up, the admin section is password protected, I've got my own SSL certificate, and I CHMOD'd something to something (I followed the install instructions) , and now I'm wondering: that's it? It seems too easy.

 

How do I know that my site and the information contained within it is secure? It seems like there's something I don't understand, but I don't know what it is (one of Rumsfeld's "known unknowns" possibly?).

 

stew

[Mibble 0]

as with anything you do for software, you have a checklist, which shows the steps needed to prove it is working. so go place an order, a few orders, etc, and see where the links take you. do they go to https://whatever upon checkout? do you have any errors stating there are secure and unsecure items on a page you are going to? play with the store and try to break it from a users standpoint.