To store CC#'s or not?

If I wish to not store credit card numbers in a database on my ecommerce
website, what are the alternatives? Are there any that allow easy
transactions for the user?

Thanks,
Brett

Brett wrote:

If I wish to not store credit card numbers in a database on my ecommerce
website, what are the alternatives? Are there any that allow easy
transactions for the user?

Regardless of the alternative, if you are not storing the CC number,

the customer must enter it each time, either manually or by some automated
means on the customer's computer.
One possibility uses a cookie: encrypt the cc number before storing it
on the customer's computer. Of course this supposes the customer has
cookies enabled and are persistent.

--
jmm dash list (at) sohnen-moe (dot) com
(Remove .AXSPAMGN for email)

"Brett" <no (AT) spam (DOT) net> writes:

If I wish to not store credit card numbers in a database on my ecommerce
website, what are the alternatives? Are there any that allow easy
transactions for the user?

You can use paypal if you can deal with their fees. You can feed paypal
other user information (e.g. email) to speed up the process on the
paypal side.

--
Make that pile of digital photos presentable: http://ourdoings.com/
It's quicker and easier than you think.

Gazing into my crystal ball I observed "Brett" <no (AT) spam (DOT) net> writing in
news:OqednT5kE4i5Nw3cRVn-1Q (AT) rcn (DOT) net:

If I wish to not store credit card numbers in a database on my ecommerce
website, what are the alternatives? Are there any that allow easy
transactions for the user?

Thanks,
Brett

You must not store customer's credit cards in any type of database that is
open to the Internet. Save the last four digits, the name on the card, and
the expiry date.



--
Adrienne Boswell
Please respond to the group so others can share

"Adrienne" <arbpen2003 (AT) sbcglobal (DOT) net> wrote

Gazing into my crystal ball I observed "Brett" <no (AT) spam (DOT) net> writing in
news:OqednT5kE4i5Nw3cRVn-1Q (AT) rcn (DOT) net:

If I wish to not store credit card numbers in a database on my ecommerce
website, what are the alternatives? Are there any that allow easy
transactions for the user?

Thanks,
Brett



You must not store customer's credit cards in any type of database that is
open to the Internet. Save the last four digits, the name on the card,
and
the expiry date.

Why? If you need to run the charge again, say in another six months, you
still need the customer to enter in the full number.

Thanks,
Brett

"Adrienne" <arbpen2003 (AT) sbcglobal (DOT) net> wrote

Gazing into my crystal ball I observed "Brett" <no (AT) spam (DOT) net> writing in
news:OqednT5kE4i5Nw3cRVn-1Q (AT) rcn (DOT) net:

If I wish to not store credit card numbers in a database on my ecommerce
website, what are the alternatives? Are there any that allow easy
transactions for the user?

Thanks,
Brett



You must not store customer's credit cards in any type of database that is
open to the Internet. Save the last four digits, the name on the card,
and
the expiry date.

Why? If you need to run the charge again, say in another six months, you
still need the customer to enter in the full number.

Thanks,
Brett

Gazing into my crystal ball I observed "Brett" <no (AT) spam (DOT) net> writing in
news:ZJmdnUWrpppF8wzcRVn-gA (AT) rcn (DOT) net:

"Adrienne" <arbpen2003 (AT) sbcglobal (DOT) net> wrote in message
news:Xns959C92006DA8Darbpenyahoocom (AT) 207 (DOT) 115.63.158...
Gazing into my crystal ball I observed "Brett" <no (AT) spam (DOT) net> writing
in news:OqednT5kE4i5Nw3cRVn-1Q (AT) rcn (DOT) net:

If I wish to not store credit card numbers in a database on my
ecommerce website, what are the alternatives? Are there any that
allow easy transactions for the user?

Thanks,
Brett



You must not store customer's credit cards in any type of database
that is open to the Internet. Save the last four digits, the name on
the card, and the expiry date.

Why? If you need to run the charge again, say in another six months,
you still need the customer to enter in the full number.

Thanks,
Brett

You need to read up on the Patriots Act - basically you cannot have
information like that on a server that is accessible to the public. You
can store the last four digits, and then connect to another protected
server using that information plus the name and address of the person.

If some hacker got into your data and stole all the credit card
information, and started using it, you could be held responsible and have
to pay a lot of money. Your insurance probably would not cover it, and,
you would gain a negative reputation. No one would want to do business
with you.

What you want to do is very costly in terms of servers, developers, testing
and deployment. You're going to be better off finding out if your credit
card gateway supports recurring billing. That way, the gateway has the
information, not you.

--
Adrienne Boswell
Please respond to the group so others can share