A question for all you clever developers!

Discussion in 'PHP' started by adnewbie, May 1, 2008.

  1. #1
    Hi all, good evening to you (alter that as you will according to time zone) :)

    I've got a question I need to know the answer to for an essay I'm writing, and suspect that this is the best place to ask it.

    It relates to online purchasing.

    If, for example, I were to include a secure cashout / payment page from a website inside my own non-secure page - let's say in an iframe, or as a php include, whatever - would the security of the site be compromised?

    I imagine not, but need to make sure!!

    And in the same way, if as an advertiser I wanted to produce widgets or code for affiliates that actually enabled a payment option directly in the affiliate's page (rather than jumping to the advertiser's site) would there be any real issue with that procedure?

    In other words, are there any major technical or security issues that prevent such transactions taking place? Or is it just that advertisers prefer to have prospective buyers jump to their own sites?

    Many thanks in advance for your help! :D
     
    adnewbie, May 1, 2008 IP
  2. cool_goan

    cool_goan Banned

    Messages:
    250
    Likes Received:
    2
    Best Answers:
    0
    Trophy Points:
    0
    #2
    I dont think there is any issue there
     
    cool_goan, May 1, 2008 IP
  3. vishnups

    vishnups Banned

    Messages:
    166
    Likes Received:
    5
    Best Answers:
    0
    Trophy Points:
    0
    #3
    Remember that iframe is a new window and the the web page inside the iframe displays the secure pages of the payment gateway provider. It will not affect the security. But the header and footer pages of the payment providers website will be displayed in the iframe making a mess of your design :)
     
    vishnups, May 1, 2008 IP
  4. adnewbie

    adnewbie Peon

    Messages:
    136
    Likes Received:
    2
    Best Answers:
    0
    Trophy Points:
    0
    #4
    Thanks vishnups! It's not something I want to do personally at all - it just struck me the other day as quite strange that if you click on ad for, say, Amazon, you can't actually purchase the item without being directed to the Amazon site. Same with PayPal buttons, etc.

    I suppose I can see why these advertisers might want a buyer to come to their sites to purchase, but just wondered if for some reason, they might think it a necessity!
     
    adnewbie, May 1, 2008 IP