RE: [PHP] Help! Made a boo-boo encrypting credit cards

2011-03-03 Thread Bob McConnell
From: Brian Dunning > My merchant provider levies monthly fines based on > how many of their security restrictions you fail to > follow. I follow as many as are reasonably practical, > but I think it's virtually impossible to follow them > all, such as absurdly expensive (and probably unnecessary)

Re: [PHP] Help! Made a boo-boo encrypting credit cards

2011-03-03 Thread Brian Dunning
That's a great suggestion. I will try this and report back. It's also been suggested to me that I should have base64_encoded the encryptions before storing them in MySQL, so I'll try this option at the same time. On Mar 1, 2011, at 2:04 PM, Ashley Sheridan wrote: > Onto the problem of the data

Re: [PHP] Help! Made a boo-boo encrypting credit cards

2011-03-03 Thread Brian Dunning
My merchant provider levies monthly fines based on how many of their security restrictions you fail to follow. I follow as many as are reasonably practical, but I think it's virtually impossible to follow them all, such as absurdly expensive (and probably unnecessary) hardware. IMHO, some of the

Re: [PHP] Help! Made a boo-boo encrypting credit cards

2011-03-01 Thread Ken Kixmoeller
On Fri, Feb 11, 2011 at 4:42 PM, Brian Dunning wrote: > Hey all - > > I'm using mcrypt to store credit cards into MySQL. About 90% of them decrypt > fine, but about 10% decrypt as nonsense ("b1�\�JEÚU�A���" is a good example). > Maybe there is a character that appears in about 10% of my encrypti

Re: [PHP] Help! Made a boo-boo encrypting credit cards

2011-03-01 Thread Bastien Koert
On Tue, Mar 1, 2011 at 12:34 PM, Brian Dunning wrote: > I just wanted to ping this, as it's becoming a serious problem. I hope > someone can help. > > > On Feb 11, 2011, at 2:42 PM, Brian Dunning wrote: > >> Hey all - >> >> I'm using mcrypt to store credit cards into MySQL. About 90% of them decr

Re: [PHP] Help! Made a boo-boo encrypting credit cards

2011-03-01 Thread Brian Dunning
I just wanted to ping this, as it's becoming a serious problem. I hope someone can help. On Feb 11, 2011, at 2:42 PM, Brian Dunning wrote: > Hey all - > > I'm using mcrypt to store credit cards into MySQL. About 90% of them decrypt > fine, but about 10% decrypt as nonsense ("b1�\�JEÚU�A���" i

Re: [PHP] Help! Made a boo-boo encrypting credit cards

2011-02-14 Thread Brian Dunning
On Feb 13, 2011, at 12:44 AM, Richard Quadling wrote: > You are > using addslashes($_POST['cc_number']). Considering a credit card > number is purely numeric, the addslashes would seem to be redundant as > you don't need to escape numbers. I do that routinely to all input fields as one additional

Re: [PHP] Help! Made a boo-boo encrypting credit cards

2011-02-13 Thread Richard Quadling
On 11 February 2011 22:42, Brian Dunning wrote: > Hey all - > > I'm using mcrypt to store credit cards into MySQL. About 90% of them decrypt > fine, but about 10% decrypt as nonsense ("b1�\�JEÚU�A���" is a good example). > Maybe there is a character that appears in about 10% of my encryptions th