There are four levels of JustAddCommerce Security. You can change your security setting at any time, but you may only select one method of security at a time. Read the descriptions below to choose the best settings for your site.

Standard Security (Default Setting)

This option uses the default security settings built into JAC and is the recommended setting for product-based businesses. Your site will be easy to maintain, and this option gives you the greatest flexibility with JAC and with the widest range of browsers possible. All new buttons created with this option will not be encrypted. (See JAC Encryption) below. Standard Security will still work with encrypted buttons if you have any on your site. This will allow you to mix Standard Security and JAC Encryption on your site.

URL Checking (Old JAC Compatibility)

This security option is still available to be compatible with JAC 4.0 settings. You will be able to specify what web servers are authorized to submit items to the shopping cart. This option prevents users from changing your product information, but it does not work with all of today's Web Browsers and Firewall technologies. Some people could be blocked from using your site if you enable this option.

All new buttons created with this setting will not be encrypted. (See JAC Encryption below). URL Checking will work with encrypted buttons. This will allow you to mix encrypted and non-encrypted buttons on a site.

URL Root

This security feature ensures that all order data originates from your web site's domain and not from another company's domain. You will need to type in your web site's main domain name into this field. This address should be the root level address of your site. For example, if all your HTML pages are found at www.mycompany.com, then you should enter http://www.mycompany.com into this field. If your web site is located on more than one domain, then enter each domain name with a space separating each. For example, http://www.mycompany.com http://www.mycompanytoo.com

JAC Encryption (New)

This is the new preferred way to protect your product information from change. You will be required to enter an encryption key that will be used to encrypt all of your sensitive product information. You will only be allowed to enter this key once. Buttons created with this security option will be encrypted on your HTML page, making it very difficult for someone to change the information. You will be able to edit your buttons with JAC 5.0, but they can't be modified outside of our editor. If you plan to store your product information in a database, you will need to create the information inside of JAC and then save the encrypted information to your database.

JAC Encryption should always be used when you want the best security and already have existing purchase buttons. JAC Encryption will work with encrypted and non- encrypted buttons so you can convert your site to the new format at your own pace. For the best security use Force JAC Encryption. This option will only allow encrypted purchase buttons to add items to a customer's shopping cart. Only enable this option when you have converted or built all of your buttons using encryption.

All new buttons created with this option will be encrypted.

Force JAC Encryption

This option is the same as JAC Encryption (see the description above) with one difference. Force JAC Encryption will only accept encrypted buttons. If you were to have some Purchase Buttons on you site that were not encrypted they will not work with this option set. You can tell if a button is encrypted or not by looking at the HTML. If you can read the price and description of your product then the button is not encrypted.

All new buttons created with this option will be encrypted.

Private Key

The JAC Encryption Private key is used to encrypt your Purchase Button information. It will only be used if you have JAC Encryption (New) or Force JAC Encryption selected. You can choose any characters you want for this key. We recommend that you use both numbers and letters in your key to prevent someone from guessing what the key is. This key can only be set once. We recommend that you keep a copy of the key in a safe place in the event you need to move purchase buttons to a different account number. Once you set your Private Key you will not need to enter it anywhere else in the system and no one from Rich Media Technologies will ever ask you for this information. Do not give it out to anyone.

Confirm Private Key

This allows you to enter your key a second time to make sure that the key is exactly what you want. Like the Private key, you will only enter this field once.