Thread: do i need ssl

one of my clients one an online registration form in which he wants this registration name and all details of the registrant and also with credit card number and so on... do i need SSL for this so that all the data would be secured. i hope hackers cannot hack in the vodahost servers?

do i need SSL for this simple registration?

Hackers hack your form, not the server, so if you are collecting cc numbers etc then you would be advised to use ssl.
I for one would never enter my personal details (credit card No etc) unless I knew that I was dealing with a secure method of payment.

but in order to use ssl you will need a dedicated server.

Any private information needs to be done on a secure page - therefore the SSL and dedicated lines.

You should look at this 2-post thread for the some real information to be aware of regarding SSL and General VodaHost's link provided to see your clear options: http://www.vodahost.com/vodatalk/rev...r-website.html

>> There is still a lot of mis-inderstanding about SSL, and this should point out some facts and offer solutions......That was easy!

thankx for all the replies, but can i have an SSL certificate in my vodahost account, is vodahost a dedicated server?

i am thinking of having a third party to do all the credit card processing so in that case do i need an SSL certificate?

"Third party processing" is a red flag for anyone in business, as a vendor, and as a processor.
This may not be an option according to agreements with processing providers and platforms, especially in today's security-minded environment, and SSL is by no means a guarantee that you will be able to perform your "business model" as you dreamed. (SSL is an "assurance" indicator, not a permission)

Rather than get hung up with dedicated servers and how that figures into SSL certs, you need to get your facts straight on transactional policies, and if you know where you are headed.......in my lowly opinion, of course!

Originally Posted by naghosthunter

but in order to use ssl you will need a dedicated server.

NOT CORRECT. You do not need a dedicated server to use a ssl, any VodaHost customer can use a ssl.

hmm well i was lied to cause i was trying to look for ssl for my site and the place that had ssl states you must have a dedicated server thanks vodahost for correcting me. so i do apologize for my wrong input i retract my statement and ask to be humbly forgiven . :)

so how does one go about by getting their CSR to get their ssl if it's not required to have a dedicated server?

thanks jim

Click the below for SSL 's, we will handle everyhting including CSR's, dedicated IP's and full Installation.

www.vodahost.com/ssl.htm

thank buddy oh and i stand corrected i meant dedicated ip not server.

hello everyone,

i have check the following link http://www.vodahost.com/ssl.htm and have gone through the detail too.

but i have this question, one of my clients wants an online registration form for an event, and people registering online pay through credit card. so, i guess there must be something like credit card processing and all kinda stuff.

now here is the twist, since it is a year-round event what the website owner has to do is deduct certain membership fees time and again from the members through the credit card. how can it be dont automatically?

i'm confused

Sameer,

Depending on who your processor is, not your merchant account bank, but the processor ie: authorize.net for example, you can set up recurring billing thru them for a fee, where you periodically charge for subscriptions etc as what I think you are describing fits that category. So once they sign up and you have confirmation, then you can rebill thru authorize.net(if they are who u use) for those fees. Different processors have different requirements so find answers to those questions before you sign up for your account.

Karen

Originally Posted by sameer

hello everyone,i'm confused

OBVIOUSLY!

Sameer.....

I have a feeling you have good intentions, and are trying to offer professional services to your "clients" (which you list by name on your website, but do not offer anything to see as far as waht you have actually accomplished), but it my personal opinion formed from all of your other posts (which ask the most basic questions repeatedly, and ignorantly of how to even find the simplest of answers yourself) that you might possibly be in over your head.

Your understanding of how to conduct business online is far-fetched to say the least. It is NOT common to process credit cards on a "third-party" basis, even if you have a brick-and-mortar store.....in fact, most credit card processors strictly forbid the practice, and consider it illegal activity!

Your earlier inability to comprehend simple answers to your posts indicates a possible language gap (most likely), but also points out the fact that your true comprehension of how to design, operate, and PLAN a website is severely mis-calculated. It also points out a possible situation that might endanger your account at VodaHost: if you are creating websites for "clients" and hosting them in your account, you would be in violation of the Terms of Service for your VodaHost account, as you are not permitted to "resell" hosting or "shares" of hosting via your account whasoever!

Now that you have gotten past the understanding of how to "secure" a website with the use of an SSL certificate, and what that consists of, and are exploring how to conduct transactions.....it is obvious that you do not know how the system works in the least. I fear that you are going to make a serious mistake if you are not totally familiar with the standards of conduct with regard to use of credit cards online (and every other method of payment) and how to actually set up the process so it will both comply with the restrictions applicable to your site (and it needs be YOUR site) and be functional. This familiarity comes only by studying the requirements of the Processors you are considering to handle your transactions, and any other Banking laws you may be subject to (NEPAL, CHINA, etc.). Your client should have an official account already, and their bank should be the first ones you should approach to learn of how to properly deposit funds to that account, and under what protocols. (Every country has different rules, and many of your peers here in VodaLand lack even establish basic level, let alone advanced business knowledge, let alone international banking experience!) In other words, YOU HAVE TO DO YOUR OWN HOMEWORK. Posting questions in an open forum without bothering to perform even a Keyword Search to pull up earlier discussions that will undoubtedly have the solutions you are seeking is beyond rude....it is extremely annoying.

If you are hoping to develop a website for another that will be capable of transacting payments in an approved and compliant manner, I suggest you explore either the Soholaunch website builder or the Cube Cart, both of which are available Free with your VodaHost account. Do your due diligence by going through all the video tutorials to discover the different features and how you might configure them to your particular needs. You might even wish to install one temporarily to try your hand using it until you feel confident enough to delete your "practice version" and re-install it to configure a "real version" accordingly.

And...again...IF you are intending to "host" client websites in your VodaHost account, the only allowable way to do this is fully described HERE. Any other means is stricly forbidden. I hope you understand this completely.

I personally think you would be better off completely defining your needs in a website on paper, then quietly evaluating the available technologies available here at VodaHost before you take further steps. This will require you to investigate all the rules and requirements you need to be aware of as you construct your business, which more often than not, truly dictate HOW you proceed, and WITH WHAT technology you need to accomplish your goal.

"Plan Your Work, Work Your Plan!"


Remember: You are the one who needs to do the work. We can only assist you when you stumble.....we can't be expected to be your entire resource!

I do not intend to be harsh with you, but it seems as if you are continuing in the wrong direction (despite earlier criticisms).
I am only trying to give you a clue as to how best to proceed....


In My Opinion

well vasili,

i'm new to credit card payments online and if my client want's something on his website, why should i lose the client just because i don't know how to do this stuff. if i can find enough resource on the net and try to do it though some other third party (note: the third party is just for the secure online registration processing) then why not get the job done.

well, i'm not hesitant to tell u that my work is for nepalmarathon.com and yes they are my personal clinet i'm not reselling this to any other person. i'm well aware that i cann't resell my hosing plans to any third party and why should i.

and yes thanks for the quote, "Plan Your Work, Work Your Plan!"

this should realy apply to me. i only work 4 what i know, other stuff i try to search on the net. u c i play same :)

cheers

Originally Posted by sameer

well vasili,

i'm new to credit card payments online and if my client want's something on his website, why should i lose the client just because i don't know how to do this stuff. if i can find enough resource on the net and try to do it though some other third party (note: the third party is just for the secure online registration processing) then why not get the job done. Just "getting it done" outside of standard practices may be illegal....that is why I suggested you learn from the video tutorials for free shopping carts here at VodaHost how processing payments and credit cards works (learn by trying to configure the function).

well, i'm not hesitant to tell u that my work is for nepalmarathon.com and yes they are my personal clinet i'm not reselling this to any other person. i'm well aware that i cann't resell my hosing plans to any third party and why should i. If your client is as important as they seem, it is extremely important for you to do everything "by the book."

and yes thanks for the quote, "Plan Your Work, Work Your Plan!"

this should realy apply to me. i only work 4 what i know, other stuff i try to search on the net. u c i play same :) Not quite. Searching the net for bits and pieces of information that you personally try to put together for a greater understanding is faulty at best, and a waste of time at worst. Everything you need to know is here at VodaHost, and every technology you could desire is also here.....

......for instance:

1. Did you know that in addition to using PayPal FREE (by far the easiest and versatile method to transact by credit card, and even checks!), as a VodaHost customer you also have the opportunity to have a FREE merchant account established??? You need to Submit a Support Ticket to request this, and you should study about the differences first....(like I suggested, go to the Marathon's Bank and ask THEM what you need to know and take care of to deposit funds into their pre-established account)

2. I am suspect of your unwillingness to move past trying to use "third-party processing" and caution you to reconsider. Hopefully, you are not trying to process monies collected on behalf of the Marathon and then charging them a "fee" which you would keep a portion of what was orignally collected.......we call this "skimming" and is the very reason processors do not allow third-party ANYTHING....(maybe Nepal/China has different rules, but you will find processors to all be on the same page, and are not willing to allow such processing schemes --- again, that is why I strongly suggest you contact the bank you will be depositing funds into: they will instruct you on their preferences and processes...)

You have a lot of planning ahead of you!
Good Luck!

Sameer - I'm not sure that you are asking for 3rd party - just how to automate the system - which can be done with some processors and banks.

What you are talking about would require storing the person's information - and, to do that, like Vasili says - it would have to be done with a bank/gateway that has all the secure encryption to do so. You, personally, would never want to be seeing the person's credit card information.

Now, there are ways, like Karen mentioned, that aren't quite as automated. The bank and gateway I use gives me access to bring up current customers by name or their account with my stores and post new charges to their accounts. This is a manual procedure- and I still do not have access to their credit card numbers. This I often use for large customers who order and pay in increments - usually a percentage down and the rest on shipment/delivery.

You need to talk to banks/gateways that are available to you where you are located.

I think the problem here might be the term 3rd party - Sameer - are you thinking the bank/gateway is a 3rd party?

hello,

now my client (nepalmarathon.com) has seen a similar site kathmandumarathon.com and in it the registration process is processed by some third website (signmeup.com), which i suppose is not a bank.

now since i will not be offering the credit card processing, since it will be a lot of hassle and since it considers hard earned cash of the credit card owners, i have to be very serious of the service i offer(rather i suggest) to my client (nepalmarathon.com).

i did go through the soholaunch online manual, but i think it would not be appropriate for a marathon registration and credit card processing?

Did you know that in addition to using PayPal FREE (by far the easiest and versatile method to transact by credit card, and even checks!), as a VodaHost customer you also have the opportunity to have a FREE merchant account established??? You need to Submit a Support Ticket to request this, and you should study about the differences first....(like I suggested, go to the Marathon's Bank and ask THEM what you need to know and take care of to deposit funds into their pre-established account)

Unfortunately this is not always the case, while internet merchant accounts are easily and readily available to US, European and most first world country residents, many people that reside in countries like India, Russia, China, etc… have a much harder time obtaining merchant account due to the lack and immaturity of the banking systems in there home countries. This is why third party processors like PayPal, 2CO, World Pay, Planet Payment, etc…are many times the only options.

For example you can not get a US merchant account or open a US bank account with out a Social Securtity number...

Originally Posted by VodaHost

Unfortunately this is not always the case, while internet merchant accounts are easily and readily available to US, European and most first world country residents, many people that reside in countries like India, Russia, China, etc… have a much harder time obtaining merchant account due to the lack and immaturity of the banking systems in there home countries. This is why third party processors like PayPal, 2CO, World Pay, Planet Payment, etc…are many times the only options.

For example you can not get a US merchant account or open a US bank account with out a Social Securtity number...

Understood, General.....that is why the recurrant suggestion to inquire "in-country" and on behalf of formal planning.

Additionally, my suggestions would have created a series of responses by Sameer to realize the options and how they would predicate the structure of the site (whether he could do it/set it up FOR them, or if it needed to be construed by the "client" themselves -- thus eliminating any question about 3rd party, skimming, or complicity whatsoever.) That is exactly why I suggested openly a PayPal medium, and furthered the idea trail by mentioning a Free VH Merchant account....demonstrating that there are MANY methods open to him, not all having been considered previously.....

This is not intended to be argumentative, but more explanation to earlier posts which seem to have been mis-read, or not seen with the depth hinted at.

Just a fyi - Paypal is not available to many of these countries, either - as a member of this forum could tell you. She's in Malaysia and that is a country Paypal doesn't cover. She got around the problem because she banks in a country that paypal will cover.

We did an intensive search for a solution for her - found one (she's building in Soho) - then discovered that Soho doesn't connect to that payment gateway. Which is when we went back to the drawing board and Karen and I worked with her - discovered her bank was out-of-country - and sent her back to Paypal to see if that would solve her dilemma. So far, so good.

Vasilli,

What Beth says is true. We work with many in third world countries, so yes we get around the international marketing perspective much more than you give us credit for. As well as merchants in Austrailia, New Zealand, and most of Europe. Paypal isnt a viable option and most likely he will be looking at MSI in Singapore for his transactions, and there are indeed ways to set up what you are referring to as 3rd party, and being paid a fee for it. Its just not a standard account, but a service and if the bank knows up front and you arent doing anything ILLEGAL, and thats your business, it can indeed be done.

I like you Vasili but sometimes I just wanna slap you with a PROZAC, gees! Let the guy explain himself before any of us JUMP to conclusions, or over the cliff.

Karen

hi,

ok, i do understand that i cannot open a paypal account here in my country. but i guess, that will not give me a problem, cause my client (nepalmarathon.com) is a resident of germany and he should not have any problem for the paypal.

i hope that should help solve the problem.

i'm just a solution provider. i show my client the way to do that, but he has to do all the stuff out there in germany. i just design the webpage and make sure it looks cool and tidy. i am a designer.

:)