CC Payments
Printed From: Web Wiz Forums
Category: General Discussion
Forum Name: General Discussion
Forum Description: General discussion and chat on any topic.
URL: https://forums.webwiz.net/forum_posts.asp?TID=16443
Printed Date: 29 March 2026 at 2:08am Software Version: Web Wiz Forums 12.08 - https://www.webwizforums.com
Topic: CC Payments
Posted By: Gullanian
Subject: CC Payments
Date Posted: 05 September 2005 at 6:20am
Is it possible to collect CC numbers and details and just bill them yourself?
I think I record someone telling me about a card not present
transaction on a till or something... Or do you have to use an
Internet Merchant?
|
Replies:
Posted By: Bluefrog
Date Posted: 05 September 2005 at 10:55am
You can do it if you have a credit card processing account - which varies according to the place.
I'd make sure to really harden whatever box you are using though to store it if you do - you don't want to get hacked.
Personally, I'd try to find a payment solution that will do it for you
- to absolve youserlf of any responsibility in case anything goes
wrong.
I used to keep credit cards on file in paper under lock and key, but
not on disk. I still refuse to keep passwords on disk unless they are
protected with strong encryption and not programmatically available,
and not available over a network (i.e. not on a server). If I get
hacked, I prefer it to be locally
Cheers
------------- http://renegademinds.com/" rel="nofollow - Renegade Minds - Guitar Software http://renegademinds.com/Default.aspx?tabid=65" rel="nofollow - Slow Down Music
|
Posted By: dpyers
Date Posted: 05 September 2005 at 11:23am
Once you start collecting credit card details you up the risk exposure
to a whole new level. The cc companies and whoever you hae a merchant
account with will want to review your security and will also hit you
with higher fees.
-------------
Lead me not into temptation... I know the short cut, follow me.
|
Posted By: the boss
Date Posted: 06 September 2005 at 7:38am
not a sensible option unless u are a big company and pay for hiring full time security professionals followed by programmers expertising in security based coding and stuff.. also consider how many credit cards u r goin to process in a day.. 100, 200, 500, 1000????? still very small numbers to offset your spenditure in infrastructure to store CC Numbers.
------------- http://www.web2messenger.com/theboss">
|
Posted By: dpyers
Date Posted: 06 September 2005 at 7:50pm
I've done it before but the db with the cc info on it was on a separate
db server from that used for the rest of the customer info and was
behind 2 levels of dmz's. Hitting it from the web side or from the lan
side was restricted to specific process id's that were registered when
the server came up and bound to specific ports and protocols.
Only specific MAC id's on the lan were allowed to do a virtual "swipe"
of the card. The tiotal cost of the cc app - hardware and development -
was around $100k but the client was hitting 50-100 cards a day for
$1200-$2500 each so there was some cushion.
After all business was concluded (which could take a few weeks), the
customers card info was erased - not just deleted. The only reason why
they held the card info in the first place was because legally they
could only "swipe" the card after they were well into the business
process.
-------------
Lead me not into temptation... I know the short cut, follow me.
|
|