Re: E-commerce site issue?

on 13/08/02 1:39 PM, Jason Wong (php-general@gremlins.com.hk) wrote: > On Tuesday 13 August 2002 10:29, Justin French wrote: > >> Needless to say, this is not light work. You should seriously consider >> paying someone to do this properly for -- at least the first time, and try >> to learn off them. You should spend lots of time talking with your host >> about security holes, and most importantly, you should destroy the cc >> details as soon as you no longer need them -- 20 cc#'s stored is less >> desirable to a hacker than 2000, or 20,000 cc#'s. > > But how would the person breaking in know how many CC#'s you were storing? > Reminds me of the signs that you see in some stores -- "Our staff do not have > access to the safe". > > So you can have on your website "Hackers please note we only store twenty > credit card numbers at any one time" :) Hehehe that wasn't quite the point I was trying to make :) Only storing 20 is less risk than 20,000. Storing zero is the safest. Justin French