Re: Question about handling credit cards
| From: | Matthew Fonda | Date: | Mon, 04 Oct 2004 22:03:31 +0000 |
| Subject: | Re: Question about handling credit cards | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-198624@lists.php.net to get a copy of this message | ||
The best way to store credit card numbers is to have them encrypted when
they are stored in the database, and decrypted when they need to be
used, that way it will be safer for the most part
On Mon, 2004-10-04 at 14:49, Ed Lazor wrote:
> I'm looking at online stores and it seems like a lot of them maintain copies
> of credit card numbers. Is this true? That seems like a "bad thing" to me,
> especially in terms of liability and risk of hackers. On the flip side, it
> seems like there are legitimate reasons. For example, if you bill the
> customer when products ship, rather than when the order is received. Or, if
> the customer decides to have instock items ship now and back ordered items
> ship when they arrive - which results in two shipping charges.
>
> How do you guys handle this?
>
> -Ed
--
Regards,
Matthew Fonda