Credit Card.
I store the last 4 numbers on the live site and immediately move
the reset to an better protected database w/ write only
permission.

eMail errors
You can turn off logging and there is a way to customize the
error e-mail, I saw it in the source somewhere.
ExceptionHandler.py writes the errormessage and calls the
writeErrorReport method on the transaction to dump the fields
There is a "fields to report" list in that method that you can
use to block all of the fields.  If you just want to stop your CC
field
you would have to write some code there.

Thanks,
-Aaron
----- Original Message -----
From: "Luke Opperman" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, April 18, 2002 11:46 PM
Subject: Re: [Webware-discuss] encryption


> Passwords: We're using md5 hashes. If a user loses their
> password, we generate a new one and ask them to change it
> once they login.
>
> Credit Cards: PGP pairs. But I've got a question specific
> to WebWare here:
>
> We're in the middle of our first CC site in Webware, and
> have been logging/emailing errors on other sites. However,
> when an error occurs the form fields are logged/emailed as
> part of the exception report.
>
> Which leads to a problem: the CC number/info are sent
> plaintext in the emails. So, what are you guys doing for
> this? Would it be possible to have someway in Webware to
> set some form fields that are NOT logged/emailed?
>
> Just a thought..
>
> Luke
>
> --- Chuck Esterbrook <[EMAIL PROTECTED]>
> wrote:
> > I need to encrypt the passwords and credit card numbers
> > in my database.
> > Any recommendations on an approach?
> >
> > -Chuck
> >
> > _______________________________________________
> > Webware-discuss mailing list
> > [EMAIL PROTECTED]
> >
> https://lists.sourceforge.net/lists/listinfo/webware-discuss
>
>
> =====
> ------------------
> Reference Counting Garbage Collection:
> Look out philosophy majors, things really DO
> cease to exist when no one is looking at them!
> ------------------
>
> __________________________________________________
> Do You Yahoo!?
> Yahoo! Tax Center - online filing with TurboTax
> http://taxes.yahoo.com/
>
> _______________________________________________
> Webware-discuss mailing list
> [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/webware-discuss
>


_______________________________________________
Webware-discuss mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/webware-discuss

Reply via email to