This forum is no longer open and is for reading/searching only.

Please use our new MachForm Community Forum instead.

MachForm Community Forums » MachForm 2

Data Security Questions, email vs database


  1. webcommerce
    Member

    This might seem a dumb question to many of you, but I need to know the answer before I go much further with Machform. I'm surprised there is nothing about data security in the features listed for MF (apart from a brief mention of SSL).

    The main reason I purchased MF is that the data from the forms is stored in a database and not directly downloaded (with the email settings suitably altered) by email.

    We currently have our (php) forms on a secure (SSL) server and the data is sent to us by email. However, I understand there is a real risk with this for sensitive data (like credit card details) to be sent by email and that the most secure way to collect form input is to store it directly into a database.

    My concern is, what is the security risk when printing out a particular entry on my printer using "Entries" screen in Manage Forms? Or, when saving the data in excel or comma delimited files onto our local server?

    Can someone with the requisite knowledge give me some assurances here? If, by recreating all our forms in MF is totally secure, then that's what we will do - otherwise, if there are still real security risks involved I'd like to know now before we commit to a lot of work.

    I'd really appreciate any input on this as it's a fundamental concern to anyone who deals in sensitive data collection. I'm sure there are other people who would also like to know about this.

    Regards,
    Ron S

    Posted 16 years ago #
  2. Saghalie
    Pro Member

    I did a search on "Secure" in this forum and came up with this:
    http://www.appnitro.com/forums/topic/smtp-over-ssl-and-encryption?replies=6#post-3137

    I think it may apply to your question. If you have any other concerns then someone from AppNitro will have to assist you. Maybe a support ticket?

    Hope this helps!

    Saghalie
    Halo wawa. Bossion de Cafe!

    Posted 16 years ago #
  3. webcommerce
    Member

    Thanks for the reply.

    However, I'm not wanting to use email at all to send any sensitive data.

    My concern is more general: how secure is it to print data from the database using "Entries" screen in Manage Forms? Or, when saving the data in excel or comma delimited files onto our local server?

    Regards,
    Ron S

    Posted 16 years ago #
  4. yuniar

    1) How secure is to print data from the database using Entries screen?

    If you are using HTTPS when printing the entry, then your data is completely secured, because printing is actually the same thing as retrieving the data through SSL to your local computer and then send the data locally to your printer.

    Your data is encrypted during transmission, no worry about this one.

    2) How secure is when saving the data in excel or comma delimited files onto your local server?

    Do you mean local server (your website server) or your local computer (your desktop)?

    When you export the data into excel, the data is being transmitted through SSL too. It's as secure as your other HTTPS pages.

    However, if you re-upload the excel file back to your server, this would be a different matter. Depends on what you are using to upload the excel file and where do you upload it. I'm not sure if this is what you mean though.


    MachForm Founder

    Posted 16 years ago #
  5. webcommerce
    Member

    Thanks Yuniar,

    You've answered my questions.
    I was referring in both cases to my local server (PC) not the web server.
    I had assumed because the website is secured via SSL that I would be OK, just needed that extra assurance from you.

    Thanks again - an excellent product and excellent support.

    Ron S

    Posted 16 years ago #

RSS feed for this topic

Reply