I am not very technical, and I don't know if this is the right place to post this question. Sorry in advance.
Anyways, hiring someone to do the e-commerce site can be futile, so I tried to do it myself.
I have been picking up some books and learned Drupal, and also configured a small e-commerce site. The payments will happen through a payment gateway which is supposed to be secure, although credit card details would be passed through my website (using https)
I have been using the Drupal documentation and trying to follow their basic security guidelines - http://drupal.org/security/secure-configuration.
Now I am looking at VPS hosting, and I am wondering, so I install Drupal on their host and follow Drupal.org guidelines. How do I really know my application is secure?
I am taking peoples credit card information (I am not storing it), and I have this sinking feeling that maybe I am not doing enough ... is there a chance those details could be intercepted through some vulnerability on the server side? I don't know exactly what, maybe some loop hole that I don't know about, am I being paranoid?
The sinking feeling is because I don't know the inner-workings of the operating systems, networking, etc. and it seems like it would take a lifetime to understand. I tried learning a bit of Linux, and then stopped, it is too much and I want to work on my business, not in it.
So I am facing the dilemma of what else should I do, what is reasonable. Its in my nature to be very detail-oriented and understand everything, having a hard time with this.