Results 1 to 5 of 5
  1. #1
    Newbie
    Join Date
    January 18th, 2005
    Posts
    23
    Brian

    Your form for merchants to make a deposit -- that captures the credit card data -- is an insecure form. I would strongly suggest that you secure that via https://.

  2. #2
    ShareASale President/CEO and ABW Veteran Brian - ShareASale's Avatar
    Join Date
    January 18th, 2005
    Posts
    3,657
    If you are more comfortable with that page being SSL https, you can type into the address bar above...

    https://shareasale.com/m-deposit.cfm

    instead of the http://www.shareasale.com/m-deposit.cfm

    The reason it is like this is not to annoy you... [img]/infopop/emoticons/icon_smile.gif[/img] , but many people were having trouble with being kicked out when accessing that page...this was a while ago, anyhow, the page was left unsecured.

    However, due to the way that the cards are processed, it actually won't matter either way security wise, as the data is sent immediately (through secure connection) to our card processor...this is more info than you probably needed, but the info is secure either way you do it...if you've developed websites before, you know what i am talking about.

    anyhow, i will see if we can get a link in there somewhere to direct to a secure page instead, but in the meantime..the above temp solution will work for you if you want...

  3. #3
    Newbie
    Join Date
    January 18th, 2005
    Posts
    23
    Hi Brian and welcome back.

    Thanks for answering my various questions,
    and for the instructions for accessing the page via https:

    However, I do have to comment - you said it doesn't matter because things are secure and sent direct to your server. But, the reason https:// exists is to encrypt the data from MY browser TO your server -- to prevent its possible interception. Although you may treat it securely once it reaches your server, it is not secure as it travels from my browser, across my internet connection, back to your web server.

    I would not enter credit card or personal data into an insecure form.

    Thanks

    [ 07-24-2002: Message edited by: CatsPlay.com Cat Furniture ]

  4. #4
    ShareASale President/CEO and ABW Veteran Brian - ShareASale's Avatar
    Join Date
    January 18th, 2005
    Posts
    3,657
    i will post a link up there to access the page via ssl...however, i think we were saying the same thing... since the info never goes to our server in the first place...the transmission doesn't go from your browser to our server until the way back from the card processor...and thus it doesn't really make any difference security wise...you'll notice that when you complete the deposit, the page is secure...

    anyhow, not really worth explaining, the best thing to do here is just to provide a link to the page via ssl...will try to complete that today sometime...

  5. #5
    ShareASale President/CEO and ABW Veteran Brian - ShareASale's Avatar
    Join Date
    January 18th, 2005
    Posts
    3,657
    Link now provided to the SSL secure version of that page....

  6. Newsletter Signup

+ Reply to Thread

Similar Threads

  1. Replies: 2
    Last Post: September 12th, 2014, 06:50 PM
  2. W-9 Form
    By janet21 in forum ShareASale - SAS
    Replies: 2
    Last Post: December 11th, 2007, 11:28 AM
  3. help with w-9 form
    By Richard - AMWSO in forum ShareASale - SAS
    Replies: 2
    Last Post: January 25th, 2007, 05:28 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •