Reputation
223
Top tag
Next privilege 250 Rep.
View close votes
Badges
1 10
Impact
~2k people reached

  • 0 posts edited
  • 1 helpful flag
  • 74 votes cast
Oct
18
awarded  Popular Question
Jul
19
awarded  Informed
Jun
21
revised Forking project on Github process
edited title
Jun
21
awarded  Citizen Patrol
Jun
21
awarded  Yearling
Jun
20
awarded  Scholar
Jun
20
accepted Forking project on Github process
Jun
19
awarded  Nice Question
Jun
19
asked Forking project on Github process
Oct
11
awarded  Commentator
Oct
11
comment Should the admin interface of a public-facing webapp be accessible externally?
From day 1 when we started eCommerce, we set the rule. "We do not store credit card numbers."
Oct
11
comment Should the admin interface of a public-facing webapp be accessible externally?
Customer data is billing contact (address, email, phone). That is all.
Oct
11
comment Should the admin interface of a public-facing webapp be accessible externally?
The only identifying information in that table is the Order Id and Transaction Id. No actual credit card information. We don't even store the last 4 digits of the CC number. We then log the customer name and contact info (address, email, phone) for reporting purposes to bring that information internal for our financial systems. We use First Data. What they return back in their web service is what we store. Saving us from looking up that information in their web portal and on our side to see what went wrong. Hopefully.
Oct
11
comment Should the admin interface of a public-facing webapp be accessible externally?
This would be basic for payment troubleshooting and then exporting the previous day's transactions in case of problems with the automated system.
Oct
11
comment Should the admin interface of a public-facing webapp be accessible externally?
Hmm... we'll have to research what we can and can't store then.
Oct
11
awarded  Student
Oct
11
comment Should the admin interface of a public-facing webapp be accessible externally?
True, my other concern is those that explore and how to better hide the admin. But moving it internal would fix that.
Oct
11
awarded  Editor
Oct
11
comment Should the admin interface of a public-facing webapp be accessible externally?
I wasn't sure which site it belonged in. I felt it was more technical side than user side.
Oct
11
comment Should the admin interface of a public-facing webapp be accessible externally?
I updated the question for some more details.