Credit card sending

Richie_GP

I've been researching for quite a while trying to find an answer but with many conflicting stories and views, I haven't really found a solution.

Basically, I have designed an online store for a client with its own shopping cart. Once they have completed their shopping they go to the checkout in the normal way (which proceeds onto SSL).

The problem I have is that the client wishes to process the credit card details in -house so I need a secure way to take the details the user gives and get it to the client for processing.

After looking, I thought perhaps PGP encrypted emails would be the best way to go (as directed by "PHP and MySQL Web development" by Welling&Thomson) but I was informed that my host does not, and has no plans to support this.

So I'm really at a loose end. Can anyone suggest a way (or ways) in which I could do this?

Drakla

Do they have openssl installed? (Check phpinfo()). I had the exact same situation as this and started on an openssl solution but never finished it, and think that it's definitely do-able.

Richie_GP

Yeah, openssl is installed:

OpenSSL 0.9.7a

AstroTeg

Originally posted by Richie_GP

So I'm really at a loose end. Can anyone suggest a way (or ways) in which I could do this?

The best way is to go through a gateway. It'll reduce copy/paste errors on the card number (assuming card number comes in via email) and save some time for your client. Plus its a ton more secure. Nobody can steal card numbers if they don't exist on the server or anywhere else. If someone abuses a card number, and they point it back to you and the way your system is built, could you afford the consequences? If it was your card number, would you want it handled the way you're setting it up?

Personally, email is dangerous (encrypted or not). Encrypted is definitely better than nothing.

What's the hang up with going through a gateway? They already have credit card processing at the facilities. Adding a merchant account should be a no brainer. Sure, there's some additional fees, but you have to pay to play...