when this number is stored in the variable how long is it stored in the system memory? Is there anyway to prevent this from happening?

ummm ... errr ... no.

Seriously if it's in a variable, it's in system memory. And it will be in memory, theoritically, until the end of its scope (possibly until the end of the process or depending on how you've configured your system and what happens to the process, possibly forever in a core dump).

This is why you have to take a "layered" approach to security.

  1. batten down the web server, don't run it as root and whatever user you run it as, ensure others in that group are trustworthy
  2. batten down the os, make sure all security patches are applied in a timely fashion.
  3. batten down your network, make sure your firewalls are configured correctly
  4. batten down your people - if you can't trust them ...

then stop worrying ... or worry less.

-derby

update: I forgot:

0. batten down your app. Ensure you use the correct scope and handle faulty input (including signals) correctly.

another update: Just saw a review of this on slashdot ... may be worth the buy.

In reply to Re: Authorize.Net Credit Card by derby
in thread Authorize.Net Credit Card by Anonymous Monk

Title:
Use:  <p> text here (a paragraph) </p>
and:  <code> code here </code>
to format your post, it's "PerlMonks-approved HTML":


  • Posts are HTML formatted. Put <p> </p> tags around your paragraphs. Put <code> </code> tags around your code and data!
  • Titles consisting of a single word are discouraged, and in most cases are disallowed outright.
  • Read Where should I post X? if you're not absolutely sure you're posting in the right place.
  • Please read these before you post! —
  • Posts may use any of the Perl Monks Approved HTML tags:
    a, abbr, b, big, blockquote, br, caption, center, col, colgroup, dd, del, details, div, dl, dt, em, font, h1, h2, h3, h4, h5, h6, hr, i, ins, li, ol, p, pre, readmore, small, span, spoiler, strike, strong, sub, summary, sup, table, tbody, td, tfoot, th, thead, tr, tt, u, ul, wbr
  • You may need to use entities for some characters, as follows. (Exception: Within code tags, you can put the characters literally.)
            For:     Use:
    & &amp;
    < &lt;
    > &gt;
    [ &#91;
    ] &#93;
  • Link using PerlMonks shortcuts! What shortcuts can I use for linking?
  • See Writeup Formatting Tips and other pages linked from there for more info.