Innovative Designs Online provides secure transactions from your site, as well as multiple layers of protection surrounding your site within our network. Our clients buyers data is secured when using our ecommerce site designs. Our security features are as follows. Your buyers information is protected by PABP (Payment Application Best Practices) certification. PABP certification indicates adherence to strict security policy and procedural guidelines outlined by VISA/MasterCard to help ensure PCI compliance in your installation. We have worked with one of the best independent VISA/MasterCard approved auditing firms for our certification. PABP release fully tested in PCI compliant environment for VISA/MasterCard certification supports SSL Encryption for secure ordering. Cart automatically switches into secure mode appropriately. Supports any brand SSL certificate (contact your hosting company for certificates). Dedicated SSL certificate required. Medium trust hosted servers fully supported. IP address tracking: for safety and auditing-IP addresses are logged (PABP), AVS (Address Verification) reporting from gateways in all orders, integrated max mind geo location fraud detection, require periodic password changes (PABP), password salting + hashing (PABP), store admin can lock out any customer account for security/fraud reasons (PABP), any order can be marked as fraud for later forensics (PABP), CAPTCHA image login protection [protects against automated BOT login attacks (PABP)], comprehensive 1 year aged read only security log built into admin site-viewable only by admin super user (PABP), give individual admin operations permissions to view full credit cards or not (PABP), allows customers to individually select if they want their credit card information stored (overrides by store admin possible), all password change operations logged (PABP), complete control over strength of passwords required for store logins and admin logins (PABP), support for dynamic encryption key changes via admin site (PABP), store admin specified encryption salting so every order record contains a separate encryption key (PABP), encrypted database connection strings in files (PABP), secured password protected store administrator control panel and integrated .net security roles and support. IDO's security audits are performed regularly. Assessment included checks for secure coding practices and encryption, validating parameter length that could lead to a buffer overflow, various buffer overflows, cookie manipulation/cookie poisoning, SQL injections, cross site scripting attacks, badly configured servers, man in the middle attacks using a web proxy and SSL version hacking.