Re: Best practices for storing credit card info?

From: Mark D Powell <Mark.Powell_at_eds.com>
Date: 9 Nov 2004 16:49:34 -0800
Message-ID: <2687bb95.0411091649.28052be4@posting.google.com>

laredotornado_at_zipmail.com (D. Alvarado) wrote in message news:<9fe1f2ad.0411090647.6e69653d_at_posting.google.com>...
> Hello,
> We are running an ecommerce application using Oracle 8.1.7
> enterprise server. What are the best practices when it comes to
> storing credit card information? We want the user to be able to
> specify whether or not they want their credit card info stored so that
> it can be there when they return.
>
> We are on Solaris using a WebLogic front end.
>
> Thanks, - Dave

ENCRYPT the data in the database!

Use SSL in the web page so that the number is not transmitted in plain text over the web.

Purge the data if it is not used in some time period.

HTH -- Mark D Powell -- Received on Tue Nov 09 2004 - 18:49:34 CST