I'm after a nice easy way to store my customers details online.
Is it best to avoide putting in customers CC info? What do other people do and use?

AVOID!

There has been some threads on this recently and one solution is to encrypt the CC number and have it emailed to you where you can decrypt it and save it on a local/safe computer.

If you want your customer to be able to see which card they are using, one solution is to save four first and last numbers of it in a database and show that info to the him. That should be enough forn them to identify the card.

Originally posted by Ben ozric

Is it best to avoide putting in customers CC info?

Your best bet is to put all of your customer's credit cards in a file called index.html, then create a directory on the server and call it secretccdirectory and load the file into that directory. Make sure you set the permissions for the file and directory to 666 :D.

You are correct, you do not want to store credit card information on the server, you want it stored in a database that is in your office, and not reachable from the outside world. ASPCode's suggestion is a good one, except that usually you only need the last 4-5 digits to verify the card.

Originally posted by uuallan


Your best bet is to put all of your customer's credit cards in a file called index.html, then create a directory on the server and call it secretccdirectory and load the file into that directory. Make sure you set the permissions for the file and directory to 666 :D.



hehehe... top!