Hello everyone,
I am currently producing an order system that accepts credit card details, puts them into an xml scheme and sends them to billing department to deal with. What i need to know is what security issues i need to deal with from accepting the card number from the form to inserting it into the xml file. The number isn't stored in a database (well at least not one i deal with) and is validated by a custom validation method. The page uses SSL.
#1 - The order form process consists of entering the customers contact details, which are stored in a class data structure (a class called order which has another class inside for address and credit card).
#2 - The user then clicks next which puts the order class into ViewState and updates the UpdatePanel to display the credit card text fields.
#3 - When the user clicks next again the card number is validated and added to the Order class which is retrieved from the ViewS ...
Go to the complete details ...