Ensuring the utmost security for donor information is paramount. Indeed you need to employ SSL encryption to safeguard data during transmission. You can also utilize tokenization to add an extra layer of protection by using unique identifiers rather than raw data and process sensitive operations on the server to minimize risks associated with client-side handling. Like not mix Front with Back. You must also ensure a strong client-side security practices to prevent any exposure of critical data, maybe try sanitizing any entries you have like search bars or sum. There is some services that help you conduct security audits and adhere to industry standards such as PCI DSS to ensure compliance and up-to-date security measures. This and many other security methods are available

As well you must consider going for safe and known payment processing platforms like Stripe, PayPal or any that is known for a great service and ensure to use the original SDK of this companies

Thank you for your answer, it appears that they want paypal donation ,and just account info where they should donate, i guess this is safe..Donation button will lead to paypal, so i guess this is safe enough

Oh yeah, PayPal offers an attractive security solution in they buttons . Great idea 🙂

So based on this, since they dont put any of their info on this website, ssl is enough ?

Well maybe while integrating PayPal they should put the Client ID and Secret inside .env files and use routes and all that stuff the official documentation gives. And yeah SSK will be enough

Yes i am aware for the client id and secret key inside .env..I will do that of course