About: Carla Madni

Hi,
(I’m Carla’s developer, Lore.)
I watched the video which is far more informative than most tutorials I’ve seen. That’s high praise coming from me, because I’ve watched so many.

Based on the video, I think I should create a downloads page, which shows only those items which they’ve purchased using the custom capabilities. Is it possible to combine that purchase with a 1 year subscription at time of sale, thus restricting their access to their downloads page to one year? That would accomplish yearly licensing, and they’d get their reminder email, be able to login for support, etc. If not, would you please consider adding this in the next year, to be able to make a custom capabilities sale, and combine it with a membership?

Also, do you have information about security & whether you’ve proofed this code against injection attacks, etc? I have implemented some solutions myself, such as restricting the admin panel to my IP via htaccess, but I think a page on this topic would be appropriate if it doesn’t exist yet. I wish to cover all the bases that I can. I understand that the card information is not stored on my server, which is a good thing, but is there any danger in having the authorize.net key in there? Could someone do something with that info if they got it, like somehow gain access to my boss’s bank account?

Thanks. :)