Help - Please check my security

[remmo]

Can someone please check my check out process to make sure it is secure.

Please place a dummy order by selecting credit card as payment option. Do you get any warnings that part of the site is insecure, or any pop up windows saying certificates have expired?

I only need to know this for all check out pages leading to and including the page where on you edit credit card details - so please don't complete orders with fictitious credit card numbers... thanks

[John Ennals]

I've tried it with IE6 and it seems to work OK. The usual warning pops up when you first enter checkout, but you just click the button and carry on.

John.

[domino1]

Hi Remmo.
I get the following when proceeding to checkout from the basket page:

Security Alert
The name on the security certificate is invalid or does not match the name of the site.

Thereafter it all seemed fine.

Nice site by the way. Very clean layout.

[RuralWeb]

The usual warning pops up when you first enter checkout, but you just click the button and carry on.

I get the same warning saying that the certificate name does not match - I would suggest that this is not normal and would certainly stop me from buying.

[jont]

I received a Google-Analytics error warning when hitting checkout saying mis-match of certificates! This would certainly make me hit the cancel button.

Have you recently installed the Google stuff? If so may be worth double checking your code and where it is placed. There is a current v7 thread by Dave about how to install

[RuralWeb]

These days any indication that a site may be insecure will send shoppers running

[jont]

As a note using Firefox when hovering over the flyout menu the hover text disappears so all you are presented with is a white block - not ideal for users with a short memory.

Great site BTW - very clean and elegant

[pinbrook]

I attached the error message i get, so you need to look at the analytics code

[remmo]

This warning has popped up since I've installed Analytics using Dave's pointers in his excellent post.

I'm concerned about this warning as it would stop me also... so I think I'll reverse the analytics things I've done....

Funnily enough though I've had one of my best days as far as sales go.

Any ideas about how to fix this problem - or is it a google thing

[pinbrook]

I feel it is doubtful it is a google thing as others don't have the same problem, it could be either the way you have implemented the analytics code. or some odditiy with the shared SSL you use.

[domino1]

Hi Remmo,

I'm using Actinic's Shared SSL and not my own secure server. There appear to be some extra complications when the analytics data is sent from a separate secure server.

The following (from Google Analytics Help) might be useful..

http://www.google.com/support/analyt...y?answer=26915

This is the bit I think is relevant to you:

Start of Cut and paste from Google Analytics Help
If your website initiates a purchase checkout process on a separate store site
(for example, if you send customers from www.mystore.co.uk to www.securecart.co.uk):

Add the following lines (in bold) to your tracking code on both your store site and your shopping cart pages:
<script src="http://www.google-analytics.com/urchin.js" type="text/javascript">
</script>
<script type="text/javascript">
_uacct="UA-xxxx-x";
_udn="none";
_ulink=1;
urchinTracker();
</script>

Change the links from the main site to the secure site to use __utmLinker as follows. If your current links look like:
<a href="https://www.securecart.com/?store=parameters">Purchase Now</a>

change them to:

<script type="text/javascript">
document.write('<a href="javascript:__utmLinker(\'https://www.securecart.com/?store=parameters\');">Purchase Now</a>');
</script>
<noscript>
<a href="https://www.securecart.com/?store=parameters">Purchase Now</a>
</noscript>

The code above provides links for users with or without JavaScript enabled. It is important to note that apostrophes need to be escaped with a backslash where they appear in the link or link text.
End of Cut and paste from Google Analytics Help

You may want to wait until your site isn't likely to be busy before trying anything out. I'd suggest about 3am if possible :-)

Hope this helps.

Dave