Take credit card details and e-mail it?

Anon

All suggestions wanted for the following:

I have a form that accepts credit card information and, when it is submitted, I need to e-mail this information to a predefined e-mail address.

How can this be done SECURELY without using a secure server ?

Thanks
Richard

reagent

try using the mcrypt libraries in php or using pgp/gpg theres a tutorial on webmonkey somewhere..

Anon

PGP?

Really Richard, transmitting CC details by email is a really really bad idea.

If email is your only option, then I would suggest you get your script to write the CC data into a file outside the webroot and then email you to say that new details are waiting for attention.

Anon

I'll take another look an encryption/PGP but somehow I never quite understood it the last time I looked at it ;-)

You're right though - I will NOT do it without some form of security and failing that I think I like the "file outside the web root" option as a last resort!

It's not my fault though - it's my client who doesn't want to pay any more money to get a secure server!

Thanks for the ideas

kparker

how can this be done SECURELY without using a secure server

Up is down! Black is white! Seriously, the question answers itself: you can't do it securely w/o a secure server. Even if you can handle getting the email from the webserver to yourself in some encrypted format, w/o a secure server the ccard number is visible when being POSTed from the user's browser to the server.

Bad idea.