Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.lang.php > #11660

Re: Secure website

From Jerry Stuckle <jstucklex@attglobal.net>
Newsgroups comp.lang.php
Subject Re: Secure website
Date 2013-10-30 14:56 -0400
Organization A noiseless patient Spider
Message-ID <l4rko3$7ap$1@dont-email.me> (permalink)
References <bvs079542iah0epg2h21d7cpks1elanllp@4ax.com>

Show all headers | View raw


On 10/29/2013 11:02 PM, Graham Hobbs wrote:
> Hellop,
>
> I have an ordinary website (all PHP), it has no 'conscious'
> protections, just code that does a job. One page (not written yet
> because I don't know how), will advertise a product for sale.
>
> My concept is that a buyer goes to a paypal screen, does the
> necessary, when payment is verfified and paid, an email is
> automatically sent to the buyer with a download key. At the buyers
> dicretion, they go to the download page, enter the key and the
> software gets downloaded. Is this sort of thing a novice PHP'er could
> do.
>
> I'd like to be sort of semi-conversant before I contact paypal. Is the
> above feasible, is my ordinary website secure, is there a specific set
> of PHP'ish or other 'things to do'
> e.g.
> ... how to prevent more than one download, do I store the software
> package on my ISP's server, is it safe, since it has several exe files
> would they be in a zip file, how to assign a download key, let the
> whole process be automated?
>
> .. starter clues appreciated, thanks,
>
> Graham Hobbs
>

A couple of questions:

1. What happens if that "one download" is unsuccessful?  Are you going 
to make the buyer pay again?

2. What is to stop one person from buying your program, then sending it 
off to all of his friends (or uploading it to another site)?

You can do it, but in addition to the other comments about PayPal - if 
they have a system outage, it can take several hours (even after they 
make it back up) for them to process the payment.  It doesn't happen 
often, but it does occur.

-- 
==================
Remove the "x" from my email address
Jerry Stuckle
JDS Computer Training Corp.
jstucklex@attglobal.net
==================

Back to comp.lang.php | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

Secure website Graham Hobbs <ghobbs@cdpwise.net> - 2013-10-29 23:02 -0400
  Re: Secure website Denis McMahon <denismfmcmahon@gmail.com> - 2013-10-30 03:26 +0000
  Re: Secure website "J.O. Aho" <user@example.net> - 2013-10-30 06:52 +0100
    Re: Secure website Graham Hobbs <ghobbs@cdpwise.net> - 2013-10-30 10:47 -0400
      Re: Secure website "J.O. Aho" <user@example.net> - 2013-10-30 18:03 +0100
        Re: Secure website Graham Hobbs <ghobbs@cdpwise.net> - 2013-10-30 19:18 -0400
  Re: Secure website Jerry Stuckle <jstucklex@attglobal.net> - 2013-10-30 14:56 -0400
    Re: Secure website Graham Hobbs <ghobbs@cdpwise.net> - 2013-10-30 19:15 -0400
      Re: Secure website Jerry Stuckle <jstucklex@attglobal.net> - 2013-10-30 23:03 -0400
        Re: Secure website Graham Hobbs <ghobbs@cdpwise.net> - 2013-10-31 10:27 -0400
          Re: Secure website Jerry Stuckle <jstucklex@attglobal.net> - 2013-10-31 11:24 -0400
            Re: Secure website Graham Hobbs <ghobbs@cdpwise.net> - 2013-10-31 12:47 -0400
              Re: Secure website Jerry Stuckle <jstucklex@attglobal.net> - 2013-10-31 20:36 -0400
  Re: Secure website David Quinton <usenet_2005D_email@REMOVETHISBITbizorg.co.uk> - 2013-10-31 10:24 +0000
    Re: Secure website Graham Hobbs <ghobbs@cdpwise.net> - 2013-10-31 10:28 -0400

csiph-web