in reply to Re: Execute Perl code on CGI submit for credit card encryption
in thread Execute Perl code on CGI submit for credit card encryption

Thanks for that! I had thought about wiping the field with the credit card number, but mattr's suggestion of filling the field with random junk is intriguing and probably a safer way to go.

My app isn't quite as sophisticated as what it appears you did. I'm still going to have to enter the cc numbers in to a terminal for processing, but it's a family business (wife and in-laws) so the theft angle isn't quite the same. Of course I'd *love* it if the whole thing grew to where I could justify online processing, but you have to start somewhere.

Useless trivia: In the 2004 Las Vegas phone book there are approximately 28 pages of ads for massage, but almost 200 for lawyers.
  • Comment on Re^2: Execute Perl code on CGI submit for credit card encryption

Replies are listed 'Best First'.
Re^3: Execute Perl code on CGI submit for credit card encryption
by CountZero (Bishop) on Sep 01, 2005 at 20:36 UTC
    If the terminal you manually enter the CC-number into is not connected to your web-server or to the internet you have a super-secure system as nobody can "jump" from the web-server into your CC-number storage! You will only have to physically secure your terminal from theft (some "old style" ferocious dogs and/or shotguns might be sufficient here).

    CountZero

    "If you have four groups working on a compiler, you'll get a 4-pass compiler." - Conway's Law