Hi all,
I am familiar with many of the best practices and laws involving storing CC numbers. I have one question though that was not covered in teh docs I read.
Can I, store CC info in session variables temporarily? And if so, is there any special method I should follow to make sure there is no trace session variable info available to any would-be hacker?
In my previous experience, I know there's something to do with session variables and cookies. I wanted to see if there's an issue storing CC info in session variables until the user is finished their shopping experience.
Basically, I'm writing a couple post-upsell pages for my company's landing pages. The boss wants users to be presented with product upsells before final checkout, but he wants their CC info taken on the first landing page.
What, in any, are issues with session variables and sensitive info?
Thanks.
...
Go to the complete details ...