What You Need To Know About Security


Weaver Web Designs is extremely serious about security and follows industry standards and requirements for setting up e-commerce. There are several forms of e-commerce available online that cost extra for a website. We believe however that it's more secure to set up basic e-commerce using java two way email processing and/or our faxed orders that won't cost you anything extra to provide for your website. This is assuming your place of business already has an in store credit card processing machine


How This Function Works

With this option you will be able to login to your website interface to retrieve your customers credit card developed on your websites server. However, you will not be able to see or use your customers CCV (credit card verification from the back of their card used) unless you contact them directly for it. Without it, you will be charged more to process it using your credit card machine at your place of business.

This option is free with our software and works well in the beginning when you're new to website pursuits and you don't know the exact volume of business your website will achieve online. However please note we follow these guidelines and limitations involved due to security systems developed by banks and credit card institutions for protecting consumers.

This Security Explained In More Detail

1. An email is sent to your customer and you instantaneously in real time at the same moment they purchase an item from your website.

2. For your customers security purposes your java based email tool only releases the last 4 digits of your customers credit card from the front of their credit card to travel across the internet. 

3. Your websites encrypted interface springs into action and auto databases the front of the cards number directly into your interface while not disclosing your customers precious CCV information even thought they are required to use it to process the order.

4. The CCV numbers do not appear if you're using basic email set up or fax processing. In this event you have to login to the interfaces security section for finding and processing the credit card numbers manually using your credit card machine in your store but your bank will charge you more to make the transaction from your in store credit card machine without your customers CCV. 

5. You are denied access to see and use the CCV number. For you and your customer only your electronic processor can process the CCV. You can learn more about how this works in more detail further down this page.

Password Your Security

For security purposes only our website owners and/or their representatives are provided a passworded security login to the interface to receive orders. We set up these systems up using Cisco Systems Dual Pix Firewalls and Verisign 256 bit High-Grade encryption security functions according to the rules required by your selected merchant provider.

Interface Password Controls

This is a serious plus for enterprise and merchant providers! With password interface controls in place you can set up passwords to select and protect areas of your websites interface while at the same time denying access to other areas you custom select. Example; say you only want to give IT personnel access to modify a single web page, catalog or item on your website. You select the areas of your website creating password only access. By password securing interface controls you have total control of your online business and we train and help you set up these functions through our support center.

Setting Up Catalogs

Just below is a link to one of our basic tutorials on setting up Catalogs for your website. We really care and believe there can never be to much information about web design if you're serious and want to know more before hiring a professional webmaster. Enjoy this basic flash tutorial by turning your speakers on to listen as I narrate these steps.

http://www.weaverwebdesigns.com/lesson5.html

E- Commerce Definitions

CA (Certificate Authority)
The organization that verifies Web site information and provides encrypted certificates for use in SSL transactions on the Internet.  Two of the most popular Certificate Authorities are Thawte and Verisign. We provide Verisign Security as well as Cisco Systems Dual Pix Firewalls over a 256 bit encrypted interface.


Certificate
A digital signature that contains information about your company and is used to encrypt sensitive data sent between Web browsers and Web sites. A certificate is obtained from a Certificate Authority and costis extra (by most hosting companies) to host on your site. Not at Weaver Web Designs, your Verisign certificate is included but the Verisign authentication logo costs extra to host on your site purchased directly from Verisign.



CGI (Common Gateway Interface)
A method to write programs that process information passed to and from a Web site. CGI scripts reside on the proxy servers (computer) along with the Web servers software.  These scripts are often written in Perl but may be written in any language. They are generally placed in your cgi-bin directory and run as a result of input from a Web page form. A CGI script might process the input from a Web page form and act on it accordingly; sending credit card numbers off to a credit card gateway for verification to securly process the order.



Gateway
A gateway forwards information received on the Internet to a Merchant Processor using dedicated, leased connections not accessible from the Internet. The gateway accepts connections from your Website using an encryption scheme (separate from SSL) and returns results of transactions to your Web site. The gateway charges the Merchant Processor who in turn sells their services to Web merchants. The LinkPoint® API is part of the solution through iTransact. The LinkPoint API is implemented through Miva Merchant, thus preventing the need for "C" programming knowledge.



Merchant Processor
A company whose purpose is to submit credit card information to credit card institutions. The Merchant Processor is responsible for payment resolution between a customer and a merchant when a credit card is used by the customer. The Merchant Processor initiates the transfer of funds between a credit card institution and the merchant's bank account. The merchant must establish an account with a Merchant Processor in order to process credit cards. The Merchant Processor reviews business information including credit information and the stability of the business. 

Not all businesses are accepted by some Merchant Processors. Many Merchant Processors are unwilling to accept credit card traffic generated from the Internet. Weaver Web Designs has established a relationship with iTransact to allow our customers to initiate the signup procedure online and receive a discount on setup costs. Fees include a setup fee, a percentage of monthly charge revenue and a minimum monthly fee.  The gateway fee is determned by the Merchant Processor. However, as mentioned previously, email order and/or fax batching is included free if you own in store processors. The CCV is non accessible using this fuction as explained in more detail above. 


SSL (Secure Socket Layer)
The secure communication method used between Web browsers and Web servers to ensure privacy of data transfers.


Web Server
A Web server reads files from your directory and delivers the information to Web browsers for display. A secure Web server also establishes encrypted communication between a Web browser and your Web site. Weaver Web Designs uses Savvis Network Secure Servers to deliver state-of-the-art security for your data. To verify, see our Dos Confirmation link to verify our Wall Street server info on Savvis Network is accurate!