PHP Secure Credit Card Form

[brett]

I know I can't be the only one wanting to do this.

I have the secure certificate functioning (https). Now I was just wondering what script handles credit cards best? No, I don't need the realtime stuff yet, as the client isn't quite there. We just need access to the numbers for manual processing...

Suggested secure form functionality:
- emails half the number, stores the other half
- encrypts the number a certain way for interpretation from email or download
- (any other suggested methods or scripts)

I may just have to make my own, but figured there'd be something already available.

Thanks for any feedback!

[diver]

You might check out Mal's Shopping Cart.

http://mals-e.com

[brett]

Simple flat form with credit card info

Thanks, if I needed a cart I'd go with oscommerce, zendcart or the other modified OSCommerce by chainreactionweb.com. This is just a flat mail form for registry for a conference that I need and will post shortly.

[-Oz-]

This seems a bit insecure in general, letting to person see the credit card and all that information.

There have to be encrypting PHP scripts out there, google for one Then just use that function for the CC number (pretend its a password).

[paulC]

I know I can't be the only one wanting to do this.

I have the secure certificate functioning (https). Now I was just wondering what script handles credit cards best? No, I don't need the realtime stuff yet, as the client isn't quite there. We just need access to the numbers for manual processing...

Suggested secure form functionality:
- emails half the number, stores the other half
- encrypts the number a certain way for interpretation from email or download
- (any other suggested methods or scripts)

I may just have to make my own, but figured there'd be something already available.

Thanks for any feedback!

I needed to do something similar; credit card payments for membership which would be processed manually. Mal's loked like a good option at first, but it turned out to be not quite whaqt we required. I wrote my own scripts in the end, and basically set it up so the user's credit card number is split in two, half is encrypted and stored in the database, the other half mailed to our office. Then the office staff need to log in to a secure web page from which they can access the database details, once they have this record, all credit card details are deleted from the database. The only time the complete card number is accessible is when the user is filling out the form.

It's a pretty basic solution, but hopefully secure.