Credit Card Info

[cappa]

Hi, I am new to this forum so here goes.

I run a tourism web site which promotes small b&b's. The site is working well and clients are very happy.

But, now they would like to obtain credit card information when receiving an enquiry. They do not want the cc's processed, they are just kept as a sort of security for the booking.

I am planning the following and I hope you will put me on the right path.
I will set up a new domain site with SSl certification. From the b&b page there will be a link to this site with a form asking for details and the cc number, this form will then post an email with the submitted details to the client. The visitor will then be directed to another form asking for cc expiry date, this again will be emailed to the client.

I hope that I am on the right road for security as the credit card details will be sent via separate emails.


Any suggestions greatly appreciated!!

[Corey Bryant]

Almost, but actually you never want to send a CC number via e-mail. E-mail is very unsecure. Even though you are collecting it securely - where it is going & how it gets there is not secured.

[cappa]

That is what I am afraid of. Does anyone have any suggestions as to how to overcome this problem.

Please remember I am a very small business dealing with clients who are just about able to check emails.

I need some way of obtaining credit card info without payments.

[Corey Bryant]

Well you need to encrypt the CC number at least & store it on a folder that is not in the WWW folder. And then you can create a connection to the database & allow your members to sign in to view the CC number on SSL. This is not 100% secure but it is a bit better than e-mail.

[Digger51]

If they can check email they have internet access too. If they need the credit card number they could log in and get get what they need over an SSL connection.

You could open all kinds of new opportunities for yourself and client like that.