php_guy Posted February 12, 2011 Share Posted February 12, 2011 I have two sites on two different servers server1: has the purchase page where it asks for credit card numbers etc. server2: has the CGI files to send payment data directly into the payment processor. I cannot put the CGI files on server1 due to security restrictions, etc. My question is: How can I securely transmit the credit card data from server1 to server2? Thanks! Quote Link to comment https://forums.phpfreaks.com/topic/227415-submitting-credit-card-numbers/ Share on other sites More sharing options...
Psycho Posted February 12, 2011 Share Posted February 12, 2011 https Quote Link to comment https://forums.phpfreaks.com/topic/227415-submitting-credit-card-numbers/#findComment-1173049 Share on other sites More sharing options...
jcbones Posted February 12, 2011 Share Posted February 12, 2011 1. there are laws that deal with credit card handling and processing. 2. You MUST have a certificate. To answer your question: https:// The problem: You will have to span a certificate across 2 domains, not sure if that is possible. Otherwise, your data will not be encrypted correctly. Suggestion: All data, processing shouldn't span 2 domains, it should be handled on one. Send the cart to second domain, then process there. Contact the processor to see what they require, and they should help you get it set up. Remember: #1 above. Quote Link to comment https://forums.phpfreaks.com/topic/227415-submitting-credit-card-numbers/#findComment-1173052 Share on other sites More sharing options...
php_guy Posted February 12, 2011 Author Share Posted February 12, 2011 Thanks for the quick replies guys So how about this. I move the purchase page (just an HTML page) on the second server, such that when the submit button is pressed, then it submits to the CGI script that resides on the same server. In this case, I do not have to get two SSL certificates, and all processing is localized on one machine Would this work? Keeping in mind that the data would be sent to the CGI script via POST. Is this okay, so long as I have SSL? Thanks! Now, keep in mind that i'm submitting data from Quote Link to comment https://forums.phpfreaks.com/topic/227415-submitting-credit-card-numbers/#findComment-1173055 Share on other sites More sharing options...
jcbones Posted February 12, 2011 Share Posted February 12, 2011 It should work, but there is no better way than testing it. Quote Link to comment https://forums.phpfreaks.com/topic/227415-submitting-credit-card-numbers/#findComment-1173056 Share on other sites More sharing options...
php_guy Posted February 12, 2011 Author Share Posted February 12, 2011 Awesome, thanks! So is it OK to send via HTTP POST? Or is there another preferred way? Quote Link to comment https://forums.phpfreaks.com/topic/227415-submitting-credit-card-numbers/#findComment-1173071 Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.