Build e-commerce , must need Enterprise Java Bean?

You don't need to use EJBs- they make life a little easier because they handle all the transaction stuff themselves, but they are not strictly necessary- if you think it through you can write a secure e-commerce application yourself. You just need good design and a lot of care.