Website and Server Administration Forum

**Truly** · 09-21-2009, 08:53 PM

Ok so I am using PayPal's Website Payment Pro now to handle credit card transactions. This works through an API off of my website as opposed to sending the user to the PayPal servers as done traditionally with PayPal.

This has the advantage of keeping a more initmate and stream-lined user experience. This works by collecting the users information on my server and then sending it via HTTP request to PayPal's secure servers.

The issue is that the webpage that I have collecting the user's information does not have a SSL certificate. PayPal has told me repeatedly that this is not an issue but I don't trust that.

The way I see it, the information I send to PayPal is secure because they have a secure web certificate however the information going from the clients browser to my server is unsecured and available to be high-jacked. Is this a valid concern?

The second part of my problem assuming that I do need to get a SSL certificate is that I do not have a dedicated IP address for my shared web hosting account and on my version of CPanel there is no option to generate a 2048bit CSR key but only a 1024 which is not being accepted by the GoDaddy SSL certificate that I purchased. Is this because my host is using an outdated version of CPanel?

Thanks

**chrishirst** · 09-22-2009, 05:25 AM

If you are NOT collecting financial details it is NOT a problem.

**cpace1983** · 09-27-2009, 02:23 PM

What information is being transmitted without encryption?

**zomex** · 02:58 PM

Although I cannot help you with your problem I would like to add using an SSL for an online store has many benefits.

- Protected information (To some extent)
- Builds customer trust whether you need the SSL or not
- Looks pretty good when part of the address bar lights up

I can see why you would rather the user not be directed to Paypal and I think that will benefit you once you fix your problem. Hope you get it fixed

--

It is always better to speak to your web host about SSL's than speak to PayPal about it. I’m 90% sure you need a dedicated IP to use an SSL.

**Truly** · 09-28-2009, 10:21 PM

See this is why I come to WMT and not listen to under paid sales agents pretending be tech reps. I was already in the process of adding SSL to the site before I posted this and before it went live so it was fine but it wouldnt have been had I listened to PayPal.

They told me that even though I collect the users information on my own website directly in forms created by me and then send it to paypal using HTTP requests that it is safe. Clearly this is bull****. This would be the case if you were submitting the information on PayPals servers but not when they submit it on your own private server.

Thanks for the great information guys! Chris you rock!

**ExcarceIcen** · 09-29-2009, 01:30 AM

SDGTR23YHT234FD

i'm very important google.com

Haw are you?

**Truly** · 09-29-2009, 03:03 AM

No dude your an idiot and I cant wait for your post to get deleted and your account banned. Come on Chris, wake up and take care of this :-)

**Feloacula** · 09-29-2009, 07:06 PM

top natural viagra pill alternative http://www.employment911.com/cs/memb...agra-pill.aspx
pharmacy natural viagra http://www.employment911.com/cs/memb...fessional.aspx
online herbal viagra discount http://www.employment911.com/cs/memb...agra-pill.aspx
top alternatives viagra pharmacy http://www.propeller.com/member/buy-...herbal-viagra/
natural alternative viagra pills ordering http://www.employment911.com/cs/memb...ves-super.aspx
natural viagra pill alternative pharmacy http://www.employment911.com/cs/memb...agra-pill.aspx
purchase viagra pills natural alternatives http://www.propeller.com/member/buy-...herbal-viagra/
alternatives viagra professional http://www.employment911.com/cs/memb...s-natural.aspx

**Invonsses** · 09-29-2009, 10:10 PM