Skip to content

Comment on Ask HN: Industry standards for locking down a SAAS product to prevent abuse?parent

Comments

Unfortunately I'm using PHP, but thank you! I think I'll be going with Stripe for the payment management, now just working on account management (hashing/salting passwords etc) and associating that with the accounts. I've never done this before so it's really like building two projects at once: the software, and the account/payment management system.

Find a good PHP bcrypt library and you'll be ahead of 90% of web sites with your password security. bcrypt is the current Rails best practice password hashing solution.

Stripe is good, as you'll never see credit card numbers, so you'll have no security issues to deal with in that area

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.