how do you store your clients Credit Card details? ( 7 Views )

1. Hi guys and gurlls
   
   I have a question regarding server-side/ database (PHP/MYSQL) ecommerce sites which I am about to start developing
   
   Currently there will not be an automated payment setup until sales can justify it, so for the moment the customers details are sent to the DB for retrieval later. (With SSL)
   
   My question is, is it safe to store customers credit card details in plain text on the database? or should these be encrypted first. Anyone know how Amazon or yahoo does it ?
   
   What steps can be taken to prevent credit card details being revealed, if a mysql password is breached, or any other issues i should consider?
   
   
   (ömer, Venezuela)


2. In the UK as I understand it it's illegal to hold clients credit card details in a database without a license or something- under the data protection act.
   
   
   (***@lev***, India)


3. saving someone's cc# anywhere is very very risky. You could find yourself liable for a whole lot if something happened.
   
   You shouldn't even need to store it.
   
   
   (enes, Denmark)


4. I am thinking it is not such a good idea also now, its just that I've seen various other shops, you only have to submit your credit card details the first time and it remembers them.
   
   Thanks for your suggestin guys, anymore suggestions would be greatly appreciated.
   
   
   (semih, Cambodia)


5. They might use some CC processing services, which is specialized in this sensitive data, as their back-end.
   
   
   (imote, Ghana)


6. You should only keep CC info if you have re-occurring charges to the customer. And even then keep it off line. Can't think of any good reason to store it on a web server. Any re-occurring charges can be processing with a variety of PC-based merchant software.
   
   
   (yýlmaz, Monaco)

Related Topics ... (or search in 1.720.883 topics !)