http://www.macromedia.com/security ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ MPSB03-06 - Security Patch available for ColdFusion MX/ ColdFusion cross-site scripting vulnerability with default error handlers
The interesting thing is that if you open the detail.cfm template that is available for download the header of the encrypted template says "Allaire Cold Fusion Template" Brook At 10:29 AM 9/19/2003 -0700, you wrote: >Why don't you store the CC numbers using a string public/private key >encryption scheme (RSA?) and store the private key off-line on a portable >USB device or something of that nature. Only use the private key when you >need to run the billing process. Isn't that secure? > >Brook > >At 10:19 AM 9/19/2003 -0700, you wrote: > >Hey All, > > > >I've been looking into recurring billing options with some CC processing > >companies because we do not want to go to the expense and potential > >liability of collecting and storing cc numbers. So far what I have found is > >not what I would have expected, so I'm checking to see what others may have > >found. > > > >Here's what I've been told so far: > > > >1) The cc processing company stores the CC number > >2) During the first payment processing for any given customer, you also > >setup the recurring billing details (i.e. bill this CC number annually for > >$25) > > > >Here's what I was hoping for: > > > >1) During first Tx you pass along a customer ID with the CC number etc. to > >be stored for futuire Txs on that card. > >2) When your system is ready to bill that card again (i.e. my system decides > >when it' time to bill and how much to bill), I pass the customer > >ID/details/amount to the CC procerssing company which they use to lookup the > >CC number and process the Tx. > > > >Obviously what I was hoping for gives you far greater flexibility and can > >allow the annual billing amount to fluctuate (this system gives dicounts on > >renewals for referrals). With what I've been told, I would have to > >constantly sending changes to the CC processing company to adjust renewal > >amounts....problem is there does not seem to be a way to do this unless I > >have the cc number....which of course I do not want to store. > > > >So does anybody know of a CC processing company that works the way I'm > >hoping for? Do you have any other suggestions on how to handle this > >(without storing cc numbers in my system)? > > > >TIA > > > >Cheers > > > >Bryan Stevenson B.Comm. > >VP & Director of E-Commerce Development > >Electric Edge Systems Group Inc. > >t. 250.920.8830 > >e. [EMAIL PROTECTED] > > > >--------------------------------------------------------- > >Macromedia Associate Partner > >www.macromedia.com > >--------------------------------------------------------- > >Vancouver Island ColdFusion Users Group > >Founder & Director > >www.cfug-vancouverisland.com > > > > > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Message: http://www.houseoffusion.com/lists.cfm?link=i:4:137709 Archives: http://www.houseoffusion.com/lists.cfm?link=t:4 Subscription: http://www.houseoffusion.com/lists.cfm?link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 This list and all House of Fusion resources hosted by CFHosting.com. The place for dependable ColdFusion Hosting. http://www.cfhosting.com
