Question about encryption.

[Thursday]

I am working on a form that passes credit card information from the order.php page to a confirm.php page. From what I have been reading SSL takes care of hiding the credit card information from others on the net. So is there a need to encrypt it further as it passes from one page to the other.

And once it is passed to the confirm.php page it is to be sent to [e-mail] to be handled by a human. Is that credit card information protected sufficiently?

[Installer]

When you take credit card information, you're taking on great responsibilities, some of them legal. Before doing so you should study up well on the subject to be aware of the many pitfalls. For your first question: the more you pass the information around, the greater the danger. For your second question: never send credit card information by email.

[dagon]

sign up to a merchant account with a local bank\credit card processor, they will have an api that will allow you to take cc payments in a safe (legal) way.