[PHP] PCI compliance issue

2009-06-02 Thread Skip Evans
Hey all, Some may remember my question awhile back about ensuring all CC forms are behind https. I've always put them so, but I've taken over maintenance on a site that did not and have since corrected the problem. Now the client is going for PCI compliance as a requirement by their credit

Re: [PHP] PCI compliance issue

2009-06-02 Thread Paul M Foster
On Tue, Jun 02, 2009 at 10:01:02AM -0500, Skip Evans wrote: Hey all, Some may remember my question awhile back about ensuring all CC forms are behind https. I've always put them so, but I've taken over maintenance on a site that did not and have since corrected the problem. Now the client

RE: [PHP] PCI compliance issue

2009-06-02 Thread Bob McConnell
From: Skip Evans -- The reason why this issue is being flagged is simply that both links should bring you to the same page but if look at the HTTP header response (http://www.ranghart.com/cgi-bin/?D=A) it returns a 403 forbidden even though it still takes you to the

Re: [PHP] PCI compliance issue

2009-06-02 Thread Robin Vickery
2009/6/2 Skip Evans s...@bigskypenguin.com Hey all, The original programmer created the following in the system's .htaccess file: RewriteCond %{REQUEST_FILENAME} !-f RewriteCond %{REQUEST_FILENAME} !-d RewriteRule .* index.php ...which sends any incorrect URL to the home page, correct?