Re: Credit Cards & MySQL

From: Date: Sat, 17 May 2003 18:50:13 +0000
Subject: Re: Credit Cards & MySQL
References: 1 2 3 4 5  Groups: php.general 
Request: Send a blank email to php-general+get-148035@lists.php.net to get a copy of this message
Private key is stored on a seperate machine the administrator uses that is passed over SSL when it is time to charge the credit cards. Otherwise use real time charging via one of the gateways and don't store the number. David Otton wrote:
On Fri, 16 May 2003 18:20:43 -0600, you wrote:
You need to encrypt the credit card numbers, I'd suggest using public key encryption that way even if the machine is breached the credit card numbers are not exposed.
Um. Where are you planning to keep the private key?


« previous php.general (#148035) next »