How could I sell my application safely over the internet? Wordpress, SQL, Hwid etc.

[King Archie]

Hi there,

I need to make a site where;

Users can login, change their hwid, download the file, purchase the file and contact support. The hwid I guess has to be on an SQL server.

Can someone give me some advice on how to create a platform like this?

Thank you.

 

[InsertNameHere]

1amDev

 

[King Archie]

1amDev

Thank you.

 

[Pazzword]

Thank you.

Use a SQL (or cluster of SQL databases) or possibly use Redis if you'd like NoSQL.

Have a table (SQL) for users, purchases, hwids, and downloads.

If user has a purchase in the database, they can download the resource and this will change their hwid depending on how you want that authentication/verification to work. I'll leave that up to you.

Users have username, email and hashed password stored in users table.

Not sure what else you are having trouble with? Is your issue in regards to physically writing out the system for this?

It shouldn't take too long. Simply sending HTML form data to a POST'd PHP page or using AJAX, then you could download resources, login, change hwids, etc.

Just make sure all user input is validated -- I fell victim to an SQL injection attack a few months back and I lost ~2 months worth of data. So I speak from experience.

If you use PHP, then use prepared statements for the SQL queries (think PDO).

I'm not sure what other platforms like Django, Flask, .NET, etc. have available to prevent these attacks. I'm sure they'll have something similar, though.

If you have more questions then please do PM me. I'm more than willing to offer my expertise advice.

 

[King Archie]

Use a SQL (or cluster of SQL databases) or possibly use Redis if you'd like NoSQL.

Have a table (SQL) for users, purchases, hwids, and downloads.

If user has a purchase in the database, they can download the resource and this will change their hwid depending on how you want that authentication/verification to work. I'll leave that up to you.

Users have username, email and hashed password stored in users table.

Not sure what else you are having trouble with? Is your issue in regards to physically writing out the system for this?

It shouldn't take too long. Simply sending HTML form data to a POST'd PHP page or using AJAX, then you could download resources, login, change hwids, etc.

Just make sure all user input is validated -- I fell victim to an SQL injection attack a few months back and I lost ~2 months worth of data. So I speak from experience.

If you use PHP, then use prepared statements for the SQL queries (think PDO).

I'm not sure what other platforms like Django, Flask, .NET, etc. have available to prevent these attacks. I'm sure they'll have something similar, though.

If you have more questions then please do PM me. I'm more than willing to offer my expertise advice.

Thank you for your reply, I may have to pay someone to do this since I wouldn't want to be susceptible to SQL Injection.

Will message you.

 

[spurkle]

It's very easy to bypass in most cases.