Just thinking about your problem......

It seems you could keep the data encrypted the entire path, except at 1 point ..where you actually receive the ssl-encrypted form data 

#instead of
my $ccdata = param('ccinfo');
my $ccdata_enc = encrypt($ccdata);
#maybe use

my $ccdata_enc = encrypt(param('ccinfo'));

[download]
This is the weak point, because unless you use some sort of javascript encryption at the user end, before the data is sent, the sysadmin(or hacker) can intercept the data at that point of you reading the param.

I must say that it's really unlikely that a hacker would go thru that effort to get 1 cc info at a time. They are looking for big juicy lists.

You could have a system with good security, if you ask the user to download a script, to take the cc data, encrypt it with your public key, and send it all as a big file, using LWP. That way, you have additional encryption, beyond the ssl, which the sysadmin(or hacker) would not be able to see. They would see the info, but it would be an ascii-armored pgp encrypted file. In this scenario, you could even bypass the secure server, and have the LWP-perl script email the encrypted data directly to your staff. BUT you would still have to worry about someone sending bogus scripts.

Ah...just brainstorming on an icy Friday afternoon.

In reply to Re: Passing a username/password from HTML to a Perl script by zentara
in thread Passing a username/password from HTML to a Perl script by mwhiting

Title:
Use:  <p> text here (a paragraph) </p>
and:  <code> code here </code>
to format your post, it's "PerlMonks-approved HTML":


  • Posts are HTML formatted. Put <p> </p> tags around your paragraphs. Put <code> </code> tags around your code and data!
  • Titles consisting of a single word are discouraged, and in most cases are disallowed outright.
  • Read Where should I post X? if you're not absolutely sure you're posting in the right place.
  • Please read these before you post! —
  • Posts may use any of the Perl Monks Approved HTML tags:
    a, abbr, b, big, blockquote, br, caption, center, col, colgroup, dd, del, details, div, dl, dt, em, font, h1, h2, h3, h4, h5, h6, hr, i, ins, li, ol, p, pre, readmore, small, span, spoiler, strike, strong, sub, summary, sup, table, tbody, td, tfoot, th, thead, tr, tt, u, ul, wbr
  • You may need to use entities for some characters, as follows. (Exception: Within code tags, you can put the characters literally.)
            For:     Use:
    & &amp;
    < &lt;
    > &gt;
    [ &#91;
    ] &#93;
  • Link using PerlMonks shortcuts! What shortcuts can I use for linking?
  • See Writeup Formatting Tips and other pages linked from there for more info.