From: Steve on
I'm working on a project where it will be require that a credit card
number be stored for a short time on the web database (CF7, windows
2003, mysql). At intervals to be determined, a linux host will
connect via a vpn and pull out the order information - including that
cc number - and then update the table overwriting the cc number.

The linux host is running point of sale software which stores it's
data in a mysql db - but obviously no CF on there.

What can I use to encrypt the cc number to safely store it that can
then be easily decrypted on the linux machine? I'm just not familiar
enough with the various methods available, and the person in charge of
the linux systems isn't readily available for testing (not my
problem / not my fault).

Thanks,
From: GArlington on
On Apr 15, 10:07 pm, Steve <steve.lo...(a)gmail.com> wrote:
> I'm working on a project where it will be require that a credit card
> number be stored for a short time on the web database (CF7, windows
> 2003, mysql). At intervals to be determined, a linux host will
> connect via a vpn and pull out the order information - including that
> cc number - and then update the table overwriting the cc number.
>
> The linux host is running point of sale software which stores it's
> data in a mysql db - but obviously no CF on there.
>
> What can I use to encrypt the cc number to safely store it that can
> then be easily decrypted on the linux machine? I'm just not familiar
> enough with the various methods available, and the person in charge of
> the linux systems isn't readily available for testing (not my
> problem / not my fault).
>
> Thanks,

Storing the CC number is NOT the best idea you can come up with...
Why do you need to store it? Can you store transaction reference
instead?
But, in case you MUST store and transmit the CC info over the net, you
will have to look at public/private key encryption methods (the method
usually associated with SSL)...
 | 
Pages: 1
Prev: Old Pages Giving Errors
Next: session variable