Security for Ecommerce
Hello,
I'm about to build a ecommerce site on laravel - cashier - using stripe (checkout js popup version)
- ddos protection
- white listing ips for admin portal
- code scanning / differential check
- on its own dedicated server / amazon
- ssl compliance
- // geo ip (ecommerce is available only in north america)
- google re-captcha on registration / user sign in forms
- using laravel auth for authentication
Is there anything you guys can suggest for adding another layer of security.
cheers,
Ali
Maybe CloudFlare? :)
And for logins a 2FA Auth would be also a good Idea.
DNSSEC!
I second @kayyyy
I'm using Twilio. Phone voice/sms auth codes.
Then users don't have to download another app.
Please or to participate in this conversation.