At 10.04.2002 11:48, you wrote:
>I'm working on a e commerce site and I need to store the credit card info
>of people who purchase stuff, on the site. How can I encrypt the credit card
># put it in a dbase and decrypt it when I need to
>
>Using Php4.* and Mysql.
The first thing I would sugges
ailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 10, 2002 12:07 PM
To: 'Someone Somewhere'; [EMAIL PROTECTED]
Subject: RE: [PHP] Secure storage of credit card information
Storing credit card numbers is dangerous, look at the mcrypt functions like
previously mentioned.
I would encrypt the use
Storing credit card numbers is dangerous, look at the mcrypt functions like
previously mentioned.
I would encrypt the user's credit card number with a key based on their
account password this gives you the ability to not store the encryption key
on the webserver. You should mangle it, encrypt i
DISCLAIMER:
Use this advice at your own risk. If you take my advice and your cc numbers
still get stolen, your fault, not mine. By continuing to read this, you
agree to these terms.
Put them in a separate database, on a different server, behind a firewall,
that is ONLY running MySQL and sh. Shut
If I where in your shoes I would encrypt the accounts with Mcrypt, setup
a separate database, on a separate computer, communicating on a low
speed serial line (4800 baud) using ppp, fully fire walling the
connection and doing mass logging.
Mcrypt Encryption Functions
http://www.php.net/manual/e
Lookup in the manual about the mcrypt functions
On Wed, 10 Apr 2002, Someone Somewhere wrote:
> I'm working on a e commerce site and I need to store the credit card info
> of people who purchase stuff, on the site. How can I encrypt the credit card
> # put it in a dbase and decrypt it when I
6 matches
Mail list logo
