Re: https and Credit Cards

From: Date: Wed, 15 Apr 2009 00:51:56 +0000
Subject: Re: https and Credit Cards
References: 1  Groups: php.general 
Request: Send a blank email to php-general+get-291510@lists.php.net to get a copy of this message
On Apr 13, 2009, at 10:19 PM, Skip Evans wrote:
But doesn't also the form need to be secure since you're sending CC information from that form back to the web site's server? That's what I've always assumed. I need some opinions on this, and if I'm right I think the client will defer to a few more votes.
To add to what others have said: CC processors with which I have worked will audit your site *before* certifying your site to accept CC information. In other words, if you don't do SSL, you won't be *allowed* to process cards. Ken

« previous php.general (#291510) next »