Forum Moderators: buckworks

Message Too Old, No Replies

CC details encryption on server

         

mcfly

3:35 pm on Sep 25, 2003 (gmt 0)

10+ Year Member



Hi,

I'm involved with a small company who are just starting a new online e-commerce venture. We've developed the site to the point of completion, except we haven't decided upon a payment solution yet!

The MD doesn't want to invest in running a commerical solution such as WorldPay until we've 'tested the water' a bit (it's a fairly new area of sales, so we don't know how successful we're likely to be). We already own an externally hosted site and receive orders by email with credit card details encrypted with GPG. Payment details are decrypted and processed manually.

Does anyone know of a system (low cost, preferably free) which we could run on a commerical hosting space to encrypt CC information prior to emailing to a sales address like our existing site?

Thanks in advance.

bakedjake

3:38 pm on Sep 25, 2003 (gmt 0)

WebmasterWorld Administrator 10+ Year Member Top Contributors Of The Month



Does anyone know of a system (low cost, preferably free) which we could run on a commerical hosting space to encrypt CC information prior to emailing to a sales address like our existing site?

Why couldn't you write a script to run GPG, just like you're doing now?

mcfly

3:47 pm on Sep 25, 2003 (gmt 0)

10+ Year Member



> Why couldn't you write a script to run GPG, just like you're doing now?

The current site is run by an outside company - we provide the bricks and mortar, they provide the technology. They're *very* reluctant to give away the secrets of their code.

This is my first real dabble in the field of running external applications from a web page (other than DBs), so I'm not sure whether it's possible to do as you suggest with PHP. I assume it is since you mention it! :)

Any pointers would be great.

bakedjake

3:54 pm on Sep 25, 2003 (gmt 0)

WebmasterWorld Administrator 10+ Year Member Top Contributors Of The Month



Any pointers would be great.

Check out: http*//www.zend.com/zend/tut/tutorial-brogdon.php
Also: [webmasterworld.com...]

There was another WebmasterWorld thread that there were a lot of good comments on this a bit ago (maybe a month or so), but I don't remember where or exactly when. Search for GPG and PHP and you should be able to find it! I think it was about payment processors.

mcfly

3:58 pm on Sep 25, 2003 (gmt 0)

10+ Year Member



Thanks for your help bakedjake :)

mcfly

4:04 pm on Sep 25, 2003 (gmt 0)

10+ Year Member



lol, this gets better.

It turns out we can't use shell_exec to call GPG from PHP because of security restrictions on the hosting account.

We could however call it through a Perl wrapper - if one exists. The hunt continues...

bakedjake

4:30 pm on Sep 25, 2003 (gmt 0)

WebmasterWorld Administrator 10+ Year Member Top Contributors Of The Month



Look for the GnuPG module on CPAN. You'll find what you're after. :)