Depending on the 'environment' (i.e. O/S you're using),  the tools available
might be different...

But,  using Linux (and I'm sure any other 'flavor' of Unix),  my company
used the latest 'libmcrypt' to encrypt the credit card numbers (as well as
the user passwords) within a PHP function prior to storing it in the
database.

You have to hide the 'key' or 'salt' that you used in order to 'decrypt' it
again (when using it to 'charge' transactions) pretty good (don't keep it on
the same server as the database,  in case someone gets their hands on a copy
of your DB or a 'dump').

I have attached my simple 'webdoc' on how to install "libmcrypt" for use
with Apache/PHP

----- Original Message -----
From: "Alan Cox" <[EMAIL PROTECTED]>
To: "mysql" <[EMAIL PROTECTED]>
Sent: Sunday, February 20, 2000 9:57 AM
Subject: mysql and credit cards


> Greetings: I was wondering if anyone has any ideas about the best way to
> store credit cards in a database ... and I'm not referring that much to
the
> field type, but rather encrytption techniques.
>
> Thanks.
> Alan Cox
>
> [EMAIL PROTECTED]
>
>
> ---------------------------------------------------------------------
> Before posting, please check:
>    http://www.mysql.com/manual.php   (the manual)
>    http://lists.mysql.com/           (the list archive)
>
> To request this thread, e-mail <[EMAIL PROTECTED]>
> To unsubscribe, e-mail
<[EMAIL PROTECTED]>
> Trouble unsubscribing? Try: http://lists.mysql.com/php/unsubscribe.php
>

---------------------------------------------------------------------
Before posting, please check:
   http://www.mysql.com/manual.php   (the manual)
   http://lists.mysql.com/           (the list archive)

To request this thread, e-mail <[EMAIL PROTECTED]>
To unsubscribe, e-mail <[EMAIL PROTECTED]>
Trouble unsubscribing? Try: http://lists.mysql.com/php/unsubscribe.php

Reply via email to