On Mon, Dec 15, 2008 at 3:52 PM, Leland Jackson <[email protected]> wrote:
> I capture all credit card transactions to a postgreSQL database, and use > directNIC to certify my identity and for SSL encryption. I am allowed > to maintain credit card numbers in transactions save to my PostgreSQL > databases, but it is illegal to retain the PII, (eg Personal Identity > Information number), which I pass to the Echo gateway to verify credit > cards, but do not capture anywhere in my system. The initial > transaction is submitted to authorize a transaction. If the > authorization completes, I can deposit the authorization to my bank in > California with a few button clicks, once items are shipped and/or > electronically delivered. > > http://www.echo-inc.com/payment_gateway.html > ------------------------------- You can save the entire card # in a non masked sense? Something doesn't sound right about that. At lease with 5 third bank you couldn't. -- Stephen Russell Sr. Production Systems Programmer Mimeo.com Memphis TN 901.246-0159 _______________________________________________ Post Messages to: [email protected] Subscription Maintenance: http://leafe.com/mailman/listinfo/profox OT-free version of this list: http://leafe.com/mailman/listinfo/profoxtech Searchable Archive: http://leafe.com/archives/search/profox This message: http://leafe.com/archives/byMID/profox/[email protected] ** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.

