feedback form and csv files

Is this a sensible option

[claimsweb]

I am currently putting together a financial based website and have asked a programmer to sort a feedback form

He has suggested that one "safe" way of capturing / storing data from a feedback form would be to send it to a csv file rather than to us via an email.

The general idea is that you avoid sending sensitive data by email and I would simply access the form details in the csv file thru ftp.

Seems an unusual method and as someone who's always used php - with (almost) no difficulties - Im not comvinced.

What can anyone advise about this method of form data capture?

[kazisdaman3]

Seems really unscalable, I'm sure there is a way, you can, make it secure with PHP and simply the whole process.

[kazisdaman3]

simplify*

[cameraman]

It's true that sending it by plain-text email isn't secure, but you could encrypt it before transmitting it or use an SSL mailbox.

[claimsweb]

Thanks for that

[jatar_k]

regular ftp wouldn't really be secure either

a more conventional way would be to save it to a local db and then access that through an administration section via https.

the other issue is that if this data is sensitive then you need https to collect the data from the user via the form as well.