Re: [PHP] https and Credit Cards

2009-04-15 Thread דניאל דנון
You are right - Decline the job, you don't want any credit-card stealing on your head On Wed, Apr 15, 2009 at 1:10 PM, Richard Heyes wrote: > Hi, > > > To add to what others have said: CC processors with which I have worked > will > > audit your site *before* certifying your site to accept CC in

Re: [PHP] https and Credit Cards

2009-04-15 Thread Richard Heyes
Hi, > To add to what others have said: CC processors with which I have worked will > audit your site *before* certifying your site to accept CC information. In > other words, if you don't do SSL, you won't be *allowed* to process cards. FWIW, companies exist that will host your "buy" page(s), so

Re: [PHP] https and Credit Cards

2009-04-14 Thread phphelp -- kbk
On Apr 13, 2009, at 10:19 PM, Skip Evans wrote: But doesn't also the form need to be secure since you're sending CC information from that form back to the web site's server? That's what I've always assumed. I need some opinions on this, and if I'm right I think the client will defer to a f

Re: [PHP] https and Credit Cards

2009-04-14 Thread Leonard Burton
Sounds like your client wants to end up listed in a Terminated Merchant File. On Mon, Apr 13, 2009 at 11:19 PM, Skip Evans wrote: > Hey all, > > I've always put any forms that collect credit card information behind a > secure connection, https, figuring that sending that information from the > c

Re: [PHP] https and Credit Cards

2009-04-14 Thread Andrew Ballard
On Mon, Apr 13, 2009 at 11:19 PM, Skip Evans wrote: > Hey all, > > I've always put any forms that collect credit card information behind a > secure connection, https, figuring that sending that information from the > client browser to the server should be secure, but I'm having convincing a > clie

Re: [PHP] https and Credit Cards

2009-04-14 Thread Richard Heyes
Hi, > I've always put any forms that collect credit card information behind a > secure connection, https, figuring that sending that information from the > client browser to the server should be secure, but I'm having convincing a > client that it is necessary. > > He instead insists that only the

Re: [PHP] https and Credit Cards

2009-04-13 Thread Paul M Foster
On Mon, Apr 13, 2009 at 10:19:34PM -0500, Skip Evans wrote: > Hey all, > > I've always put any forms that collect credit card information > behind a secure connection, https, figuring that sending that > information from the client browser to the server should be > secure, but I'm having convincin