Cubecarts Security?

[Guest intergemsuk]

Hi im writing a report on e-commerce and am using cubecart as an example. i would like some information on how secure cubecart is and what it uses to ensure that user data is confidential.

So far i have:

Secure login page for administrators

Users have option to retian their privacy details (data protection)

SSL for secure encrypted pages

any other forms of securit that cubecart has in place or that can be implemenetd? Or an expansion of the ideas i have come up with would be helpfull.

Cheers, Ben.

Also any links to sites about e-commerce in general would be great.

Im writing a report on Developing an e-commerce site for "Inter-Gems Ltd" (www.inter-gems.co.uk) with cubecart implemented as the software solution.

[Al Brookbanks]

Well I think the most important thing is that CubeCart has two level of brute force attack prevention. Also every major release is professionally security audited by a specialist 3rd party company who have reviled security issues in the likes of Amazon & Ebay.

[Guest intergemsuk]

Thanks for your response AL would it be possible to know who the 3rd party specialist security company are? could you expand on the 2 brute force attack prevention, please?

Would be intersing for discussion in my disseration.

Please PM me if you cant post it on the forums.

Cheers,

Ben.

[Al Brookbanks]

I've PM'd the company to you.

Basically the after x amount of failed login attempts the user is blocked. This is based in IP address/browser and attempted username access.

Level 1: Blocked Username Access

Level 2: Blocked IP/Browser