Security question

[byoriginaldesign]

I'm having a developer work on a modification for me, and my concern is that there is no way for me to really know if they are adding or doing anything malicious to the site. For example, what if they were to add something to send client's credit card info to them, or what if they create a security hole?

When outsourcing are there any tips of things that you should not give anyone else access to? Like direct DB login, full ftp access, etc...?

[kobra]

When outsourcing are there any tips of things that you should not give anyone else access to? Like direct DB login, full ftp access, etc...?

Change any full access passwords before giving out, and change after complete

[tstanley]

I have a developer needing access to my Zen Cart admin to make changes. Would they be able to do anything malicious with the information available? I am especially concerned about my payment module (PayPal) information. I plan to change the password when they are complete.

Thanks in advance for your help.

[gjh42]

Anybody who has admin access *could* do something malicious... You need to have enough references or other information about the person to be able to trust them.