wordpress and ecommerce · ecommerce is hard! security inventory shopping carts pci compliance...

42
WordPress and eCommerce A match made in heaven?

Upload: others

Post on 23-May-2020

4 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: WordPress and eCommerce · eCommerce is hard! security inventory shopping carts PCI Compliance payment gateways ssl certificates ... additional setup work. Express Checkout Customer

WordPress and eCommerceA match made in heaven?

Page 2: WordPress and eCommerce · eCommerce is hard! security inventory shopping carts PCI Compliance payment gateways ssl certificates ... additional setup work. Express Checkout Customer

$165.4 Billion

Page 3: WordPress and eCommerce · eCommerce is hard! security inventory shopping carts PCI Compliance payment gateways ssl certificates ... additional setup work. Express Checkout Customer

eCommerce is hard!

security

inventory

shopping carts

PCI Compliance

payment gateways

ssl certificates

merchant accounts

Page 4: WordPress and eCommerce · eCommerce is hard! security inventory shopping carts PCI Compliance payment gateways ssl certificates ... additional setup work. Express Checkout Customer

Today’s Outline✓ Onsite vs. Offsite Payments

✓ Processing payments with gateways

✓ Encryption certificates / PCI Compliance

✓ WordPress Security Tips

✓ Plugins and third party selling solutions

Page 5: WordPress and eCommerce · eCommerce is hard! security inventory shopping carts PCI Compliance payment gateways ssl certificates ... additional setup work. Express Checkout Customer

On Site or Off Site?OFF SITE:

✓ Extra Checkout Steps

✓ Can be more confusing

✓ No SSL

✓ No PCI compliance certification

Page 6: WordPress and eCommerce · eCommerce is hard! security inventory shopping carts PCI Compliance payment gateways ssl certificates ... additional setup work. Express Checkout Customer

On Site or Off Site?ON SITE:

✓ Extra Setup Steps

✓ Seamless Checkout Process

✓ Website requires SSL certificate

✓ Merchant required to certify compliance

Page 7: WordPress and eCommerce · eCommerce is hard! security inventory shopping carts PCI Compliance payment gateways ssl certificates ... additional setup work. Express Checkout Customer

Payment Gateway

✓ a service to process payments online

Page 8: WordPress and eCommerce · eCommerce is hard! security inventory shopping carts PCI Compliance payment gateways ssl certificates ... additional setup work. Express Checkout Customer

PaypalPaypal StandardCustomer leave awebsite to enterpayment and doesnot return to thesite. No setup work.

Website Payments ProSeamless checkout onwebsite. Customer neverleaves store. Lots of additional setup work.

Express CheckoutCustomer jumps to PayPal to enter paymentdetails and returns toorder. Little setup work.

Page 9: WordPress and eCommerce · eCommerce is hard! security inventory shopping carts PCI Compliance payment gateways ssl certificates ... additional setup work. Express Checkout Customer

Payment Gateways✓ PayPal

✓ Authorize.net

✓ CyberSource

✓ FirstData

✓ Plug ‘n Play

Page 10: WordPress and eCommerce · eCommerce is hard! security inventory shopping carts PCI Compliance payment gateways ssl certificates ... additional setup work. Express Checkout Customer

Credit Card Payments

Page 11: WordPress and eCommerce · eCommerce is hard! security inventory shopping carts PCI Compliance payment gateways ssl certificates ... additional setup work. Express Checkout Customer

Merchant Accounts

✓ a special type of bank account for accepting payments from credit or debit cards

✓ an agreement between the merchant, the bank and the payment processor

Page 12: WordPress and eCommerce · eCommerce is hard! security inventory shopping carts PCI Compliance payment gateways ssl certificates ... additional setup work. Express Checkout Customer

Merchant Accounts | Costs

✓ Discount Rates:

✓ Three Tiered Pricing✓ Qualified Rate✓ Mid-Qualified Rate✓ Non-Qualified Rate

Page 13: WordPress and eCommerce · eCommerce is hard! security inventory shopping carts PCI Compliance payment gateways ssl certificates ... additional setup work. Express Checkout Customer

Merchant Accounts | Costs

✓ Authorization Fee

✓ Statement Fee

✓ Monthly Minimum Fee

✓ Batch Fee

✓ Customer Service Fee

✓ Annual Fee

✓ Early Termination Fee

✓ Chargeback Fee

Page 14: WordPress and eCommerce · eCommerce is hard! security inventory shopping carts PCI Compliance payment gateways ssl certificates ... additional setup work. Express Checkout Customer

Encryption

✓ the process of making data unreadable to anyone without “special knowledge”

✓ “special knowledge” is the key

Page 15: WordPress and eCommerce · eCommerce is hard! security inventory shopping carts PCI Compliance payment gateways ssl certificates ... additional setup work. Express Checkout Customer

SSL Encryption

✓ Garbles the browser to server communication over the Internet

✓ Browser uses the public key in the certificate to encrypt information before sending it to the server

✓ Server uses a private key to decrypt information from the browser

Page 16: WordPress and eCommerce · eCommerce is hard! security inventory shopping carts PCI Compliance payment gateways ssl certificates ... additional setup work. Express Checkout Customer
Page 17: WordPress and eCommerce · eCommerce is hard! security inventory shopping carts PCI Compliance payment gateways ssl certificates ... additional setup work. Express Checkout Customer

SSL Certificate

✓ a specialized electronic document certifies a public encryption key to an identity

Page 18: WordPress and eCommerce · eCommerce is hard! security inventory shopping carts PCI Compliance payment gateways ssl certificates ... additional setup work. Express Checkout Customer

SSL Certificates | Buyers Guide

✓ Ongoing costs between $50-$1500/year

✓ 3-4 Certificate Types

✓ Single Domain✓ Multiple subdomains✓ Wildcard subdomains✓ Extended Valiations

Page 19: WordPress and eCommerce · eCommerce is hard! security inventory shopping carts PCI Compliance payment gateways ssl certificates ... additional setup work. Express Checkout Customer

SSL Certificates | Buyers Guide

✓ Vendors:

✓ Verisign (costly)✓ Comodo (moderate)✓ GoDaddy (cheap)✓ Network Solutions (cheap)

Page 20: WordPress and eCommerce · eCommerce is hard! security inventory shopping carts PCI Compliance payment gateways ssl certificates ... additional setup work. Express Checkout Customer

PCI Compliance

✓ 12 requirements for any business that stores, processes or transmits cardholder payment data.

Page 21: WordPress and eCommerce · eCommerce is hard! security inventory shopping carts PCI Compliance payment gateways ssl certificates ... additional setup work. Express Checkout Customer

Build and Maintain a Secure NetworkRequirement #1Install and maintain a firewall configuration to protect cardholder data

Requirement #2Do not use vendor-supplied defaults for system passwords and other security parameters

Page 22: WordPress and eCommerce · eCommerce is hard! security inventory shopping carts PCI Compliance payment gateways ssl certificates ... additional setup work. Express Checkout Customer

Protect Cardholder DataRequirement #3Protect stored cardholder data

Requirement #4Encrypt transmission of cardholder data across open, public networks

Page 23: WordPress and eCommerce · eCommerce is hard! security inventory shopping carts PCI Compliance payment gateways ssl certificates ... additional setup work. Express Checkout Customer

Maintain a Vulnerability Management ProgramRequirement #5Use and regularly update anti-virus software

Requirement #6Develop and maintain secure systems and applications

Page 24: WordPress and eCommerce · eCommerce is hard! security inventory shopping carts PCI Compliance payment gateways ssl certificates ... additional setup work. Express Checkout Customer

Implement Strong Access Control MeasuresRequirement #7Restrict access to cardholder data by business need to know

Requirement #8Assign a unique ID to each person with computer access

Requirement #9Restrict physical access to cardholder data

Page 25: WordPress and eCommerce · eCommerce is hard! security inventory shopping carts PCI Compliance payment gateways ssl certificates ... additional setup work. Express Checkout Customer

Regularly Monitor and Test NetworksRequirement #10Track and monitor all access to network resources and cardholder data

Requirement #11Regularly test security systems and processes

Page 26: WordPress and eCommerce · eCommerce is hard! security inventory shopping carts PCI Compliance payment gateways ssl certificates ... additional setup work. Express Checkout Customer

Maintain an Information Security PolicyRequirement #12Maintain a policy that addresses information security

Page 27: WordPress and eCommerce · eCommerce is hard! security inventory shopping carts PCI Compliance payment gateways ssl certificates ... additional setup work. Express Checkout Customer

Whew, are we done yet?

Page 28: WordPress and eCommerce · eCommerce is hard! security inventory shopping carts PCI Compliance payment gateways ssl certificates ... additional setup work. Express Checkout Customer

WordPress Security

Use a Strong PasswordYour first line of defense against would be hackers

Page 29: WordPress and eCommerce · eCommerce is hard! security inventory shopping carts PCI Compliance payment gateways ssl certificates ... additional setup work. Express Checkout Customer

WordPress Security

Avoid using the ‘admin’ accountSetup a different admin account with another name

Page 30: WordPress and eCommerce · eCommerce is hard! security inventory shopping carts PCI Compliance payment gateways ssl certificates ... additional setup work. Express Checkout Customer

WordPress Security

Hide your database tablesChange your table prefix from wp_ to anthing else!

Page 31: WordPress and eCommerce · eCommerce is hard! security inventory shopping carts PCI Compliance payment gateways ssl certificates ... additional setup work. Express Checkout Customer

WordPress Security

Update EverythingKeep WordPress, your theme and plugins up to date

Page 32: WordPress and eCommerce · eCommerce is hard! security inventory shopping carts PCI Compliance payment gateways ssl certificates ... additional setup work. Express Checkout Customer

WordPress Security

Backup EverythingAlways make regular backups: files and db

Page 33: WordPress and eCommerce · eCommerce is hard! security inventory shopping carts PCI Compliance payment gateways ssl certificates ... additional setup work. Express Checkout Customer

eCommerce Tools for WordPress

✓ What’s out there?

Page 34: WordPress and eCommerce · eCommerce is hard! security inventory shopping carts PCI Compliance payment gateways ssl certificates ... additional setup work. Express Checkout Customer

WP eCommerce✓ Oldest and most widely used

✓ Physical & digital products

✓ Shipping options

✓ Marketing tools

✓ Free + Paid add-ons ($10-$195)

getshopped.org

Page 35: WordPress and eCommerce · eCommerce is hard! security inventory shopping carts PCI Compliance payment gateways ssl certificates ... additional setup work. Express Checkout Customer

Cart66✓ Newest solution

✓ Uses [shortcodes]

✓ 7 payment solutions

✓ Subscriptions & Membership

✓ Free Lite Version or $89-$399/year

cart66.com

Page 36: WordPress and eCommerce · eCommerce is hard! security inventory shopping carts PCI Compliance payment gateways ssl certificates ... additional setup work. Express Checkout Customer

WooCommerce✓ Great reporting

✓ Marketing and promotion

✓ Hundreds of extensions

✓ Customer friendly checkout

✓ Free with paid extensions

woothemes.com/woocommerce

Page 37: WordPress and eCommerce · eCommerce is hard! security inventory shopping carts PCI Compliance payment gateways ssl certificates ... additional setup work. Express Checkout Customer

Shopp✓ Popular solution

✓ 18 payment gateways

✓ 10 shipping options

✓ 200+ template tags

✓ $55 or $299 with $25 add-ons

shopplugin.net

Page 38: WordPress and eCommerce · eCommerce is hard! security inventory shopping carts PCI Compliance payment gateways ssl certificates ... additional setup work. Express Checkout Customer

MarketPress - WordPress eCommerce✓ Simple and stylish

✓ Handful of payment gateways

✓ Sell real objects or digital downloads

✓ Multisite & BuddyPress Compatible

✓ Free or Pro ($19)

Page 39: WordPress and eCommerce · eCommerce is hard! security inventory shopping carts PCI Compliance payment gateways ssl certificates ... additional setup work. Express Checkout Customer

e-junkie

✓ Third party solution

✓ Includes affiliate managment

✓ Google Analytics tracking

✓ Start selling for $5/month

Page 40: WordPress and eCommerce · eCommerce is hard! security inventory shopping carts PCI Compliance payment gateways ssl certificates ... additional setup work. Express Checkout Customer

e-junkie Set Up

✓ Put your content on a password protected page on WordPress

✓ Create a message for people to go to that link and enter password in e-junkie

✓ Generate shopping cart buttons and put on your site

✓ Sit back and watch the digital product sales come in

Page 41: WordPress and eCommerce · eCommerce is hard! security inventory shopping carts PCI Compliance payment gateways ssl certificates ... additional setup work. Express Checkout Customer

Live Demo

Page 42: WordPress and eCommerce · eCommerce is hard! security inventory shopping carts PCI Compliance payment gateways ssl certificates ... additional setup work. Express Checkout Customer

WordPress Developer Training

✓ Retails for: $999

✓ Exclusive Offer: $499

✓ Use coupon ‘halfoff ’

Must Register before Monday!

To join the advanced training, register now:http://YourWebsiteEngineer.com/awdt