aliasim's avatar

Security for Ecommerce

Hello, I'm about to build a ecommerce site on laravel - cashier - using stripe (checkout js popup version)

  • ddos protection
  • white listing ips for admin portal
  • code scanning / differential check
  • on its own dedicated server / amazon
  • ssl compliance
  • // geo ip (ecommerce is available only in north america)
  • google re-captcha on registration / user sign in forms
  • using laravel auth for authentication

Is there anything you guys can suggest for adding another layer of security. cheers, Ali

0 likes
2 replies
christopher's avatar

Maybe CloudFlare? :) And for logins a 2FA Auth would be also a good Idea.

hfn's avatar

DNSSEC!

I second @kayyyy

I'm using Twilio. Phone voice/sms auth codes. Then users don't have to download another app.

Please or to participate in this conversation.