[RESOLVED] securely passing data?

[netfrugal]

Is it possible to pass credit card data securely from one website to another (on a totally different server)?

Basically, a live data feed of orders from external websites, not hosted on the same server where the info is passed onto the gateway?

I can't image passing cc info via the url string and expecting that to be secure.

for example:

https://somesite.com?fname=jon&lname=doe&address=123%20test&address2=apt3&city=harrisburg&state=PA&zip=17110&country=US&email=[e-mail]&phone=7174413728&creditcard_number=4012888888881881&creditcard_expdate_month=05&creditcard_expdate_year=2007&creditcard_name=jon%20doe&creditcard_cvv2=123&user_id=[e-mail]&password=12345&receipt_id=abcdefghijklmnopqrstuvwxyz123

Am I just being paranoid? Or is this ok to do?

[devinemke]

netfrugal wrote:

I can't image passing cc info via the url string and expecting that to be secure.

if the data is encrypted via SSL (as your example suggests) then it's ok.

[netfrugal]

thanks!

I had to ask!

[NogDog]

Will the resulting URL show up in the user's browser, or is this all going on "behind the scenes" to the user. I ask because if it does show up, this could be an issue if the client PC is used by more than one user (the data would be in the browser history, might get bookmarked, etc.).