26
Selling Stock Direct / Re: Ktools Photostore
« on: February 07, 2011, 09:46 »And about hacking, my question is: what is necessary to protect our uploaded images? Does Ktools control it, or do we need something on our server side, some special software or an extra service from the hosting company?
There is always a risk when you put your photos on the internet, regardless of where you put it. The number one rule is, if you don't want it stolen don't put it on the internet!
While we designed the store to not show the details of the photo (filenames, path to the image, full size image, ability to rename directory, watermarking etc..) this doesn't stop things like someone hacking the server that your site is on. Say for example your site is on a shared hosting at any of the popular hosting places (godaddy, bluehost, hostgator, etc..). Someone on that server is running an insecured script on their site which is also on that same server. A hacker gets into the server using that insecured script. The hacker will or could have full access to all files on that server. Another potential issue is people that purchase your product but feels they need to share it with everyone they know, there is absolutely no way to stop that with a product like a digital photo. When it comes to displaying thumbs and samples of your photos online for people to look at, the number one thing you can do to prevent people from using it for what ever reason is to watermark it. Put your name, site name, or what ever to let others know it is yours across the photos.
Quote from: madelaide
My question regarding Paypal is actually about the risk of credit card fraud. They make so many verifications that I believe a fraud is not possible. Is it so?
Yes even with paypal, orders can still be fraud. I have see a lot of them in the past 8 years with people trying to steal our products on ktools.net. It affects all online businesses that sell digital content (photos, music, software, etc..). Paypal is pretty good, but there is still a risk of fraud orders. If you force mandatory accounts in your photostore, you will then be able to compare the details of that account with the details paypal sends you. Check names, address, state, country, etc.. and make sure they match up, if not then chances are it is fraud. I know it doesn't seem right, but almost 90% of the fraud orders we get don't have identical names. Example they will signup with a name like Ben that lives in the USA, yet they checkout with paypal using an account with the name of Morgan from the UK.