Re: [PHP] Credit card storing, for processing

2005-02-04 Thread Jochem Maas
Brian Dunning wrote: Source for these statistics? I pulled them from the MYASS database. priceless -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Credit card storing, for processing

2005-02-03 Thread Richard Lynch
Brian Dunning wrote: I agree with this. There is way too much paranoia about credit cards online. 99% of stolen credit card numbers are acquired by phishing and the other 1% by uncrumpling receipts out of a wastebasket. There's no longer any reason to go to the trouble of trying to crack

RE: [PHP] Credit card storing, for processing

2005-02-03 Thread Richard Lynch
Brandon Thompson wrote: WowI was hoping someone would respond with a little balance to that reactionary doomsday speech. Don't get me wrong...those are some very valid points that need to be considered, but my gosh... I'd rather frighten away somebody from storing CCs insecurely than

Re: [PHP] Credit card storing, for processing

2005-02-03 Thread Brian Dunning
Source for these statistics? I pulled them from the MYASS database. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Credit card storing, for processing

2005-02-03 Thread John Nichel
Brian Dunning wrote: Source for these statistics? I pulled them from the MYASS database. Now that's priceless. Thanks Brian, you've made my day! -- John C. Nichel ÜberGeek KegWorks.com 716.856.9675 [EMAIL PROTECTED] -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit:

Re: [PHP] Credit card storing, for processing

2005-02-03 Thread Brian Dunning
Source for these statistics? I pulled them from the MYASS database. Now that's priceless. Thanks Brian, you've made my day! I wish I could take credit. Many versions of this have gone around, but here's one: http://www.crapco.com/badads/myass.html So much for my earlier post about keeping this

Re: [PHP] Credit card storing, for processing

2005-02-02 Thread Robin Vickery
On Wed, 02 Feb 2005 01:24:18 -0500, Angelo Zanetti [EMAIL PROTECTED] wrote: Does this setup sound secure enough and a solution that can work? What kind of encryption should I be using? Point out any areas where you think I might be missing something or going wrong. Take Richard's advice

Re: [PHP] Credit card storing, for processing

2005-02-02 Thread Richard Lynch
Angelo Zanetti wrote: thanks for the info. With regard to the setup it will be something more or less like this: DON'T DO IT!!! I want to generate my own keypair. The private key I keep secure, offline, on the machine that does the admin (charging, refunds etc). The public key is used

RE: [PHP] Credit card storing, for processing

2005-02-02 Thread Brandon Thompson
-Original Message- From: Richard Lynch [mailto:[EMAIL PROTECTED] Sent: Wednesday, February 02, 2005 1:34 PM To: Angelo Zanetti Cc: php-general@lists.php.net Subject: Re: [PHP] Credit card storing, for processing Angelo Zanetti wrote: thanks for the info. With regard to the setup

Re: [PHP] Credit card storing, for processing

2005-02-02 Thread Brian Dunning
The SIMPLEST way to do this is to charge their credit card with a recurring charge when they sign up, and then just THROW AWAY their credit card number. Your credit card processing vendor then has to remember their credit card number, not you. I agree. This is the way I've worked for years, and

Re: [PHP] Credit card storing, for processing

2005-02-02 Thread Brian Dunning
It's FAR less dangerous to implement what you are suggesting than it is to simply pay for your dinner with a credit card. I agree with this. There is way too much paranoia about credit cards online. 99% of stolen credit card numbers are acquired by phishing and the other 1% by uncrumpling

Re: [PHP] Credit card storing, for processing

2005-02-02 Thread Jason Barnett
Brian Dunning wrote: It's FAR less dangerous to implement what you are suggesting than it is to simply pay for your dinner with a credit card. I agree with this. There is way too much paranoia about credit cards online. 99% of stolen credit card numbers are acquired by phishing and It depends

Re: [PHP] Credit card storing, for processing

2005-02-02 Thread Brian Dunning
It depends on the exact situation, but a lot of times the vendors that process a fraudulent credit card purchase end up eating that loss. I can testify to this by experience. I ate $10,000 on one run of phished transactions. the other 1% by uncrumpling receipts out of a wastebasket. There's no

Re: [PHP] Credit card storing, for processing

2005-02-01 Thread Angelo Zanetti
HI Richard, thanks for the info. With regard to the setup it will be something more or less like this: I want to generate my own keypair. The private key I keep secure, offline, on the machine that does the admin (charging, refunds etc). The public key is used on the server to encrypt card

Re: [PHP] Credit card storing, for processing

2005-01-31 Thread Richard Lynch
Angelo Zanetti wrote: this might be slightly OT but I know that the list has quite a knowledgable crowd =) So here is my situation: I have a client who I have developed a site for in PHP it provides various models for shares forecasts, the way it works is that people register for free (with

[PHP] Credit card storing, for processing

2005-01-30 Thread Angelo Zanetti
HI all. this might be slightly OT but I know that the list has quite a knowledgable crowd =) So here is my situation: I have a client who I have developed a site for in PHP it provides various models for shares forecasts, the way it works is that people register for free (with their credit card