I'm not a security expert, but using a random 3rd party's IFRAME on your website to process payments through Stripe sounds INCREDIBLY dangerous. I would advise

I'm not a security expert, but using a random 3rd party's IFRAME on your website to process payments through Stripe sounds INCREDIBLY dangerous. I would advise simply using Stripe Checkout https://stripe.com/docs/checkout https://stripe.com/docs/checkout Simply paste their code into your HTML and you are about done. There's no other backend code, etc. required to make it work.