User Guide

Security 123
Authentication and Log In
Shoppers can bypass entering their account information multiple times by
entering their user name and password. Conveniently, product items can be
ordered in just a few clicks. As a developer, you can make sure account
information is private and secure.
To add privacy and security while logging in:
On NT servers, use the Management Console to set up the Challenge Response.
The Challenged Response protects files and folders by restricting IP addresses
and/or user names and passwords.
ASP Security
You can set up user name and log-in through the ASP server. See DrumNote titled
Log In for step-by-step instructions. See the User Registration Starting Point for
more information.
We have some users asking us about the ASP server-side code you see in a
published Drumbeat page. You might have noticed that within the code you can
see for example the user name and password SQL query within the code. Rest
assured that server-side code is parsed out and is not sent to the client. Any code
that is between the server-side tag <% code %> is parsed out when the page is
processed by the ASP server. Only the HTML output is sent to the client browser.
Payment Processing SET
A couple credit card companies have been developing a protocol called Secured
Electronic Transaction (SET). SET protects credit card information at the
network level. You can learn about SET from these resources: Understand
Electronic Commerce by David Kosiur, Microsoft Press.