Basic SSL question

[sodani]

I have a client who wants to accept credit card information on his site. We don't want to do automatic payment processing because he processes the payments manually using a system he has. What I'd like to do is allow a customer to input their information, and for that to get to my client securely.

Ideally, I'd like to get the form contents e-mailed to him, but if that doesn't make sense, I could have him log in to a web page to access them. Any advice on this would be appreciated.

[LifeinAsia]

he processes the payments manually using a system he has.

Red flag #1- Your client needs to make sure that his current processing contract allows accepting Internet payments. Otherwise, he could find his merchant account cancelled when they find out what he's doing.

get the form contents e-mailed to him

Red flag #2- bad, bad! That's just a lawsuit waiting to happen.

I could have him log in to a web page to access them

Not quite a red flag- perhaps orange...
You need to take a good look through PCI compliance [pcicomplianceguide.org] and make sure you understand it thoroughly before you even start thinking of what to implement.

[edited by: LifeinAsia at 4:20 pm (utc) on Sep. 8, 2008]

[moose606]

I would recommend you start here:
1) easy to use shopping cart-search forum for most popular
2) secure server-either your own ssl certificate or use the hosts ssl certificate
3) secure interface for pulling off orders
(if your client wants to receive order via email, you will need to encrypt them before sending them to client and then the client will have to decrypt them).
That should get you up and running.

[rocknbil]

One recent thread [webmasterworld.com] expanding on what LifeInAsia has posted above; another [webmasterworld.com].

[lorax]

Thanks for the reminder RB - I added those to the Ecomm 101 list [webmasterworld.com]