Re: [PHP] Credit card storing, for processing

2005-02-04 Thread Jochem Maas
Brian Dunning wrote: Source for these statistics? I pulled them from the MYASS database. priceless -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Credit card storing, for processing

2005-02-03 Thread Brian Dunning
Source for these statistics? I pulled them from the MYASS database. Now that's priceless. Thanks Brian, you've made my day! I wish I could take credit. Many versions of this have gone around, but here's one: http://www.crapco.com/badads/myass.html So much for my earlier post about keeping this t

Re: [PHP] Credit card storing, for processing

2005-02-03 Thread John Nichel
Brian Dunning wrote: Source for these statistics? I pulled them from the MYASS database. Now that's priceless. Thanks Brian, you've made my day! -- John C. Nichel ÜberGeek KegWorks.com 716.856.9675 [EMAIL PROTECTED] -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://w

Re: [PHP] Credit card storing, for processing

2005-02-03 Thread Brian Dunning
Source for these statistics? I pulled them from the MYASS database. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

RE: [PHP] Credit card storing, for processing

2005-02-03 Thread Richard Lynch
Brandon Thompson wrote: > WowI was hoping someone would respond with a little balance to that > reactionary doomsday speech. Don't get me wrong...those are some very > valid > points that need to be considered, but my gosh... I'd rather frighten away somebody from storing CCs insecurely than

Re: [PHP] Credit card storing, for processing

2005-02-03 Thread Richard Lynch
Brian Dunning wrote: > I agree with this. There is way too much paranoia about credit cards > online. 99% of stolen credit card numbers are acquired by phishing and > the other 1% by uncrumpling receipts out of a wastebasket. There's no > longer any reason to go to the trouble of trying to crack en

Re: [PHP] Credit card storing, for processing

2005-02-02 Thread Brian Dunning
It depends on the exact situation, but a lot of times the vendors that process a fraudulent credit card purchase end up eating that loss. I can testify to this by experience. I ate $10,000 on one run of phished transactions. the other 1% by uncrumpling receipts out of a wastebasket. There's no

Re: [PHP] Credit card storing, for processing

2005-02-02 Thread Jason Barnett
Brian Dunning wrote: It's FAR less dangerous to implement what you are suggesting than it is to simply pay for your dinner with a credit card. I agree with this. There is way too much paranoia about credit cards online. 99% of stolen credit card numbers are acquired by phishing and It depends on

Re: [PHP] Credit card storing, for processing

2005-02-02 Thread Brian Dunning
It's FAR less dangerous to implement what you are suggesting than it is to simply pay for your dinner with a credit card. I agree with this. There is way too much paranoia about credit cards online. 99% of stolen credit card numbers are acquired by phishing and the other 1% by uncrumpling receipt

Re: [PHP] Credit card storing, for processing

2005-02-02 Thread Brian Dunning
The SIMPLEST way to do this is to charge their credit card with a recurring charge when they sign up, and then just THROW AWAY their credit card number. Your credit card processing vendor then has to remember their credit card number, not you. I agree. This is the way I've worked for years, and i

RE: [PHP] Credit card storing, for processing

2005-02-02 Thread Brandon Thompson
hing as precious as your credit rating. Hope this helps Brandon > -Original Message- > From: Richard Lynch [mailto:[EMAIL PROTECTED] > Sent: Wednesday, February 02, 2005 1:34 PM > To: Angelo Zanetti > Cc: php-general@lists.php.net > Subject: Re: [PHP] Credit card storing

Re: [PHP] Credit card storing, for processing

2005-02-02 Thread Richard Lynch
Angelo Zanetti wrote: > thanks for the info. With regard to the setup it will be something more > or less like this: DON'T DO IT!!! > I want to generate my own keypair. The private key I keep secure, > offline, > on the machine that does the admin (charging, refunds etc). The public > > key is

Re: [PHP] Credit card storing, for processing

2005-02-02 Thread Robin Vickery
On Wed, 02 Feb 2005 01:24:18 -0500, Angelo Zanetti <[EMAIL PROTECTED]> wrote: > > Does this setup sound secure enough and a solution that can work? > What kind of encryption should I be using? > > Point out any areas where you think I might be missing something or > going wrong. Take Richard's a

Re: [PHP] Credit card storing, for processing

2005-02-01 Thread Angelo Zanetti
HI Richard, thanks for the info. With regard to the setup it will be something more or less like this: I want to generate my own keypair. The private key I keep secure, offline, on the machine that does the admin (charging, refunds etc). The public key is used on the server to encrypt card d

Re: [PHP] Credit card storing, for processing

2005-01-31 Thread Richard Lynch
Angelo Zanetti wrote: > this might be slightly OT but I know that the list has quite a > knowledgable crowd =) So here is my situation: > > I have a client who I have developed a site for in PHP it provides > various models for shares forecasts, the way it works is that people > register for free (

[PHP] Credit card storing, for processing

2005-01-30 Thread Angelo Zanetti
HI all. this might be slightly OT but I know that the list has quite a knowledgable crowd =) So here is my situation: I have a client who I have developed a site for in PHP it provides various models for shares forecasts, the way it works is that people register for free (with their credit card d