Re: Storing Credit Cards, Passwords, Securely, two-way encryption
| From: | John Meyer | Date: | Fri, 06 Jan 2006 02:35:19 +0000 |
| Subject: | Re: Storing Credit Cards, Passwords, Securely, two-way encryption | ||
| References: | 1 | Groups: | php.db |
| Request: | Send a blank email to php-db+get-40983@lists.php.net to get a copy of this message | ||
Peter Beckman wrote:
So I'm thinking about how to save credit card numbers in the DB, for re-charging cards for subscriptions, new orders, etc.Why, is the first question I would ask you. First off, on a new order, why wouldn't you just save the authorization code, instead of the credit card number? That would be a lot easier. Secondly, you're opening yourself up to a _ton_ of lawsuits should anything go awry. Unless I had a _real_ good reason for storing their cc number, I wouldn't, despite the extra step.