[Rails] Re: App best practice > Client Credit Information

2009-09-28 Thread brianp
> It seems like the client here doesn't have the foggiest idea about > security, and that's a dangerous position for you to be in. Actually > achieving PCI compliance is going to take considerable time and money; > make sure that you document any corners they want you to cut, as > you'll need tha

[Rails] Re: App best practice > Client Credit Information

2009-09-28 Thread Marnen Laibow-Koser
Matt Jones wrote: > On Sep 28, 12:31�am, brianp wrote: >> Hey, >> >> I don't exactly know why the credit card is needed but they gave me a >> pdf version of the form they get people to fill out manually and it's >> on there so... >> I had hoped I could find api's for the services they then re-ent

[Rails] Re: App best practice > Client Credit Information

2009-09-28 Thread Matt Jones
On Sep 28, 12:31 am, brianp wrote: > Hey, > > I don't exactly know why the credit card is needed but they gave me a > pdf version of the form they get people to fill out manually and it's > on there so... > I had hoped I could find api's for the services they then re-enter the > information int

[Rails] Re: App best practice > Client Credit Information

2009-09-27 Thread brianp
Hey, I don't exactly know why the credit card is needed but they gave me a pdf version of the form they get people to fill out manually and it's on there so... I had hoped I could find api's for the services they then re-enter the information into with no luck. They said they have to take the inf

[Rails] Re: App best practice > Client Credit Information

2009-09-27 Thread Marnen Laibow-Koser
brianp wrote: > Well that was the question. Whats the best way to go about this. If > it's more secure to just get the information to the recipient by email > then so be it. It needs to be somewhere long enough for someone to > manually run the check then it can be gone. So whatever the most > sec

[Rails] Re: App best practice > Client Credit Information

2009-09-27 Thread brianp
Well that was the question. Whats the best way to go about this. If it's more secure to just get the information to the recipient by email then so be it. It needs to be somewhere long enough for someone to manually run the check then it can be gone. So whatever the most secure way to do that is.

[Rails] Re: App best practice > Client Credit Information

2009-09-27 Thread Eric
Did I read you correctly in that you want to store user credit-card numbers in your database for some period of time? -eric On Sep 27, 3:50 pm, brianp wrote: > Hey Everyone, > > I'm in the process of laying out a new app for a client. They need to > be able to receive customers credit informati