The document discusses developing an e-commerce site to increase sales of handicraft products from a small local shop globally. The key objectives are to reach a global customer base, allow purchases 24/7, and automate order processing. The site will include modules for product catalog, shopping cart, payment processing, order tracking, user accounts, and admin/reporting. Technologies used will include ASP.NET, C#, SQL Server, and security measures to protect sensitive customer and payment data.

1. E-COMMERCE
Submitted By: Suraj Thapaliya

2. PROJECT OBJECTIVE
 The objective of this project is to increase and
globalize the business of small handicraft shop. The
business of these types of shops is limited. They
focus on the market of local tourism and small
segment of tourists thou the potential sales are
limited. The reason is clear. Customers who need
to reach physical location of the shop within the
limit of time will have the most livelihood of being
repeat customers.

3. PROJECT OBJECTIVE
 To reach the customers around the global.
 To ability to be open twenty-four hours a day, seven
days a week.
 To automate the process of taking and fulfilling
orders.
 To receive many more orders at one time then one
salesperson working at the physical location.

4. PROJECT MODULES
 Product Catalog
 Search and Display all the handicraft products.
 Shopping Cart
 Adding multiple products and other customer
information like shipping address
 Payment Credit Card Handling
 Payment will handling through the paypal SDK.
 Tracking Information
 All orders are tracking so that the customer will know
how long it takes to reach out their project

5. PROJECT MODULES
 User Account Login
 All customer should have to register to buy the product.
 Administration Panel
 Administrator panel will control all the content that
display to user.
 Report Management
 All reports are control from the administration section of
the system. Sales, Orders, Transaction Report will be
generate daily, quarterly, and monthly. Custom report
will help to generate the required need of the system.

6. TECHNOLOGY AND TOOLS
 ASP.NET
 Microsoft’s technology set for building dynamic web
content.
 C#
 .NET-compliant languages from Microsoft that is an
object-oriented programming language.
 Microsoft Visual Studio
 Microsoft SQL Server 2008 Express Edition
 Internet Information Services (Web Server)
 Firefox, Internet Explorer (Web Client)

7. FLOW CHART- SEARCH
START
Search
Criteria
Query Database
NO Resu YES
lt
Foun
d
Search Again Display No Display Result Search Again
Result
END

8. START
Select
Product
FLOW CHART-
SHOPPING
Add to Cart
CART
Calculate Subtotal
NO Is YES
Continue Shopping Checkou
t
NO Custome YES
r Exists
Register Account Log In
Process Payment
END

9. DATA FLOW DIAGRAM: BROWSE Handicraft
Handicraft
Information
Handicraft
Customer BROWSE Review
Handicraft
Handicraft Review
Read
SEARCH Review
Customer Handicraft_R
eview
Write
Review
Handicraft
Information

10. Shopping_Car
t_Items
Customer Shopping Cart Shopping Cart Items
Inventory
DATA FLOW DIAGRAM: SHOPPING CART
Shopping_Car
t_Items
Customer Modify Cart View Cart Shopping Cart
Items
Inventory

11. EXAMINING THE RISKS
 System Downtime
 Processing Payments
 Physical and Logical Attacks
 Physical Attack
 Logical Attack
 Prevention
 Sensitive Information and Data

12. SECURITY VULNERABILITIES
 SQL Injection
 Buffer overflows
 Cross-site scripting
 Remote command execution
 Weak Authentication and Authorization

13. SECURITY
 Privacy: information must be kept from
unauthorized parties.
 Integrity: message must not be altered or tampered
with.
 Authentication: sender and recipient must prove
their identities to each other.
 Non-repudiation: proof is needed that the message
was indeed received.

14. SECURITY
 Digital Signatures and Certificates
 A plain text message is run through a hash function and
so given a value: the message digest. This digest, the
hash function and the plain text encrypted with the
recipient's public key is sent to the recipient.
 Secure Socket Layers
 SSL uses PKI and digital certificates to ensure privacy
and authentication.
 PCI, SET, Firewalls
 Credit card details can be safely sent with SSL, but
once stored on the server they are vulnerable to
outsiders hacking into the server and accompanying
network.