Secure Information on Server

martinsach · 3rd January 2008, 05:31 PM

Hi all

I am new to UH although I have been running a website for years. I previously collected credit card data via a specialist secure server provided by my previous hosting company and on moving to UH find that there is no equivalent. I need to find a way in which I can collect secure data (we have SSL and an SSL certificate) via the website and I'm not sure how to do this since it has been made easy for me in the past! I have various forms that collect credit card data and obviously these cannot send the data by e-mail.

Can anyone suggest how best to run this system? It is not high volume and I specifically do not want an e-commerce system, just to safely access the card payment data that customers provide so that transactions can be manually processed.

Thanks!
Martin Sach

UH-Tony · 3rd January 2008, 08:33 PM

Hello,
Just to clear things up a bit for you with this request (after having also reviewed the helpdesk ticket regarding the same), please understand that the free shared SSL and or purchased Dedicated SSL (which you currently have) will work perfectly for your purposes.

It seems that what you are missing is the form or application to handle the submission of credit card details (through your fully SSL encrypted URL), storage in a secure manner such as encrypting the CC details and storing them within a database and finally reviewing the CC details by decrypting the data and viewing it through an SSL encrypted URL of your site.

This application level requirement is where we have advised that we do not provide such features as it is purely a developmental task that needs handled and usually is handled through some form of E-Commerce application.

Charles · 5th January 2008, 01:51 AM

Also note I believe that it is against Visa and MasterCard Policies to store credit card information unless you go through a PCI scan. There are different types of PCI Scans for different types of setups. The PCI Scan for you would be more in depth than one for say a business that doesn't store the credit card information but only passes it to a Gateway to process.