Securing The Store, SSL and Store Membership

[sparrowce]

Hello, I have loaded products into the store, modified side-boxes and other things (with help here, thank you). Haven't set up PayPal yet, and have a few questions before doing that.

1. Security/SSL - in studying this link, http://www.zen-cart.com/wiki/index.p...ecommendations, I can see I have some security set up to do, also have a question in to the site host provider about purchasing SSL certificate. Do I need to get the certificate/installed before setting up PayPal and following the link steps? Could someone please explain a little bit about the certificate and what order things should be done for best results and are there any other links regarding securing the store that may be useful also? Am struggling with the link above a little, and any extra links that might help explain further would be appreciated.

2. Store membership - according to this link, http://www.zen-cart.com/forum/showthread.php?t=71388, it is possible to set things up so a customer can purchase without becoming a member - has anything changed or new info since this post? I am using 1.3.9 and am not sure which direction to go on this and would appreciate any info, pro's/con's advice, as it seems forcing a customer to become a member before they can purchase might be a potential hindrance, but maybe I am looking at it wrong.

Thank you!

[puppet87112]

To answer questions

1. About ssl, if your going to be using PayPal you do not technically need an ssl certificate as PayPal has one and customers will be transferred to their site for payment. BUT on the other hand it does help in that customers who choose to sign up with have their information encrypted, and may help them have piece of mind. And yes your hosting provider can provide you with an SSL certificate, you can also choose your own to purchase them from another source. If you google SSL certificates you will see allot of companies provide them. You do need to contact your hosting provider and get a CSR (certificate Signing Request) and you will need a Dedicated IP address though your hosting provider.

So what I would do is once you pick who your going to get your cert through, I would talk to your host get the CSR and the dedicated IP and then once the company give you the cert you would send that to your host and it will get setup.

2. As to the customer loing thing that is going to be a question someone else will have to answer as I don't know much about that.

[sparrowce]

Thank you, I did not know that about PayPal and appreciate the information. Since the PayPal Express seems to allow them to complete the transaction without jumping to PayPal, if I'm understanding the tutorial here, https://www.zen-cart.com/tutorials/index.php?article=28, it sounds like the SSL from host is the right way to go, agree with your comments about customers piece of mind, thank you.

[puppet87112]

Yes if paypal express will let your customers pay from your site you will want an SSL cert. And like I said depending on how much your host charges you maybe able to find them else where. I would also check what features come with your SSL certificate different companies offer different things. I would give you a couple to look at but not supposed to post links to commercial services.

Good luck and hope everything works out.