Realbrisk - 4:43 am on Aug 22, 2010 (gmt 0)

The card data is not on the server. We send it all through the gateway. That is MY POINT. We does someone like me even need to be PCI Compliant.

you should consider tokens from Authorize.net