Forum Moderators: buckworks

Message Too Old, No Replies

shopping cart dilemma

too complex, pls read below -- thanx

         

pmarc

1:01 am on Nov 11, 2003 (gmt 0)

10+ Year Member



An SEO guy won't optimize my site. He says there's a chance credit card info in my shopping cart would leak to my offshore Web devloper IF that offshore guy had made some hidden "back doors" leading to him.

A presuption at best. 12 months and no leaks. Anyway, the SEO guy says outsource my shop cart to Yahoo and he'll feel ok. Sounds easy, but I didn't budget Yahoo's $300/mo + .75% per transaction fee (on top of my own merchant's fees). And I don't need Yahoo's bells and whistles. Not to mention their unprofessional appearance. I do things like "LL Bean" or I don't do anything - period.

Enough pontificating... I have no ego, I just need the high caliber image to sell. That's my market.

So anyone got a worthy reaction to all this? Thanx a mil.

Birdman

1:19 am on Nov 11, 2003 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Hire a different SEO. Simple as that. It's not his/her responsibility if your old designer put hidden doors in the coding.

Also, hire a coder to review the site for "doors". You'll probably sleep better at night.

Birdman

Robino

1:22 am on Nov 11, 2003 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member





An SEO guy won't optimize my site.

Ask him nicely and offer to pay.

jomaxx

1:35 am on Nov 11, 2003 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Is there some reason to suspect a problem? Maybe the message here is that the interface doesn't look very professional. These ARE credit card numbers you're dealing with, so you have a responsibility to be extremely careful. Assume that your server will be scanned by bad people for known vulnerabilities every day.

But having said that, in general it's not your job to make an SEO "feel OK" about working for you.

rise2it

1:38 am on Nov 11, 2003 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



How does he feel about not being employed?

pmarc

1:58 am on Nov 11, 2003 (gmt 0)

10+ Year Member



Hmmm. The SEO guy does have some liability you know. I could sue him if security problems arise.

Also, maybe he doesn't want a looser for a client. If I tank from fraud, my account tanks with me. A bit of synicism may reveal other motivations for his Yahoo idea -- haven't thought that out...

Anyway,funny enough, the SEO guy said he knows that with some offshore deals there's an American checking the code. I don't have that coder. Second, he says some very reliable sources told him my site's programming has:

1) "suspect" coding on it (I haven't given him logon access to the site yet?!),

2) he/others don't/won't have access to the source code so making patches to it would be risky -- hence, they don't want to design the shop cart themselves,

3) he tried to farm out a coldfusion guy to re-code my whole site -- my site is ASP. SEO guy said his ASP contacts said said the ASP code was suspect..

Maybe his company's skill set is a mis-match... can't figure. And this is a guy who's had some recent very positive publicity from some very, very heavy publications.

plumsauce

6:05 am on Nov 11, 2003 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member




ask this person for a detailed report on what
the problems are to back up his claims.

do not pay for it, as he is the one making
unsubstantiated claims.

see what happens.

it sounds like he has an agenda that is not
necessarily aligned with your best interest.

notice that he already has someone waiting
in the wings to revamp your site.

PCInk

9:27 am on Nov 11, 2003 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



he tried to farm out a coldfusion guy to re-code my whole site -- my site is ASP

So, he is really stating that they have no idea about ASP and are trying to start from scratch in a language that they can work with - charging you in the process and making it look like a necessary change?

pmarc

12:08 pm on Nov 11, 2003 (gmt 0)

10+ Year Member



QUESTIONS

Is it possible to assess a web site's coding without getting login access?

lorax

2:33 pm on Nov 11, 2003 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



>> Is it possible to assess a web site's coding without getting login access?

You cannot view script source code without access to the raw files before they are processed by the webserver. The problem is that when you visit a scripted page the webserver recognizes the page is an ASP (PHP, CFM, ...) file and passes it to the script engine which processes that page accordingly. What you see in the browser (and the source code) is the result of the script engine reading and processing the page and then passing it to the webserver which gave it to your browser.

plumsauce

2:38 pm on Nov 11, 2003 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member




yes. print out the source code in hardcopy
and give it to them.

AFTER REMOVING ALL SENSITIVE THINGS LIKE PASSWORDS

i would still not do it because they would
already be off my shortlist. do this with
someone you trust, not someone you are still
unsure of.

btw, i almost always counsel clients to move
away from CFM. it's awkward, buggy, and less
choice in terms of available maintenance personnel.
apache has php, iis has asp, cfm is a solution
without a problem to solve.

and yes, i *have* worked long term with it.

toddski07

3:20 pm on Nov 11, 2003 (gmt 0)

10+ Year Member




...
SEO guy said his ASP contacts said the ASP code was suspect.
...
QUESTIONS
Is it possible to assess a web site's coding without getting login access?

Unless they have the login id and password to your hosting account they can NOT see the full ASP page code. The server processes the ASP code and sends the output to the browser for viewing. So if they say the "ASP code was suspect" I would laugh in their face and ask "How so?"

Move on to someone else...it looks like this guy just wants to take over the project and recode it in something (Coldfusion) they are familiar with. Too many questionable things if it was me.

Todd