Re: Re: How to do Recurring Credit Card Charges?

JR, thanks a lot for your advice. I have a few additional questions if you don't mind me asking... 1) Can you explain how you produce the encrypted e-mail? Is that something done with PHP or another piece of software? 2) What info do you encrypt? The info Authoize.Net returns to you, or the info they filled out in the form before you send if off to AuthNet for verification? My concern is being sure I only keep a list of valid and approved credit card numbers, not any that are declined. And I'm not sure at whether or not AuthNet will return the CC number after being approved. 3) How do you deal with members who want to change their credit card number or cancel their membership? Do you update the CC list you keep manually? Thanks a lot! Monty > From: jr@tabbysplace.org (Jonathan Rosenberg) > Newsgroups: php.general > Date: Fri, 13 Sep 2002 16:45:36 -0400 > To: <php-general@lists.php.net> > Subject: RE: [PHP] Re: How to do Recurring Credit Card Charges? > > I use Authorize.Net & do monthly billing, as follows: > > On the server: > 1) I capture the credit card, etc. info on a secure page > 2) I verify the credit card via Authorize.Net > 3) I encrypt the info & email it to a specified address. > > Note that the credit card info is not stored anywhere on the server, but > only exists in memory for a short time. > > On a PC on which I read email: > 1) I have an Access program that decrypts the info & stores it in a local, > encrypted DB. The password is not stored on this machine. > 2) Once a month I run an Access program, which reads the DB & creates a file > on the local disk which can be uploaded as a Batch Transaction on > Authorize.net. The file is deleted after it is submitted. The batch upload > is done by logging in to your merchant account & choosing the appropriate > menu items. > > Note that the credit card info is only stored on a firewalled machine & > protected by a password (not stored on that machine). > > Hope this helps. > > -- > JR >