MySQL Help
 
Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
User Name:
Password:
Remember me
Go Back   Dev Shed ForumsDatabasesMySQL Help

Reply
Add This Thread To:
  Del.icio.us   Digg   Google   Spurl   Blink   Furl   Simpy   Y! MyWeb 
Thread Tools Search this Thread Rate Thread Display Modes
 
Unread Dev Shed Forums Sponsor:
Be the architects of evolution and help create the mobile internet future. It’s your move---enter to win here!
  #1  
Old June 5th, 2000, 05:40 PM
webnautics webnautics is offline
Junior Member
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Mar 2000
Location: Fitzgerald Ga USA
Posts: 8 webnautics User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
Send a message via ICQ to webnautics
I have a website I'm creating that will require the users to enter a credit card nubmer. The initial billing of the card is done on our secure server, but then it is stored in the MySQL database for future billings.
Given all of the recent outbreaks of hacking billing server, and databases, I would like to know if anyone knows of a way to ENCRYPT the card nubmer as it is placed into the database, and then DECRYPTED as it is retrieved to bill their card again...
If anyone has any clues, please help me!

I'm programming in PERL, so please submit the code in PERL.

Thanks,
Brant

Reply With Quote
  #2  
Old June 9th, 2000, 07:12 AM
Adrian2 Adrian2 is offline
Contributing User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: May 2000
Location: London, England
Posts: 251 Adrian2 User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 9
CPAN has Perl modules for encrypting/decrypting in just about any scheme you care to mention.

See http://www.perl.com/CPAN-local/modu...14)Authenticati

Note that the built-in Perl function crypt is useless for this task as there is no decrypt!

If your data really is that critical I'd get some good advice on overall security (including physical and internal security) and hire someone to do independent testing and auditing.

Reply With Quote
  #3  
Old June 11th, 2000, 04:45 PM
alexgreg's Avatar
alexgreg alexgreg is offline
Full Access
Dev Shed Regular (2000 - 2499 posts)
 
Join Date: Jun 2000
Location: London, UK
Posts: 2,019 alexgreg User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 3 sec
Reputation Power: 11
The golden rule of ecommerce is NEVER store credit card information in any form in a database! You don't need it there, and you certainly don't need the liability.

It's safer and more accepted to have to re-enter your credit card information for each transaction, which is what all the large ecommerce projects such as amazon.com do.

Reply With Quote
Reply

Viewing: Dev Shed ForumsDatabasesMySQL Help > Encryption / Decryption of Sensitive Data


Thread Tools  Search this Thread 
Search this Thread:

Advanced Search
Display Modes  Rate This Thread 
Rate This Thread:


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
View Your Warnings | New Posts | Latest News | Latest Threads | Shoutbox
Forum Jump


Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
  
 





© 2003-2008 by Developer Shed. All rights reserved. DS Cluster 6 hosted by Hostway