Hi there, I have a client who is wanting to receive credit card details via a form on their website. I usually create forms with EmailMeForms but they don't recommend using there forms for this. How do I ensure that a form will keep this data safe?

I have an account with 1and1 and they provide some sort of SSL, though I need to it only be applicable and accessible by 1 of the ftp's on my account.

Thanks

Zoee

As long as the form is submitted over an SSL connection - i.e. has an https:// address, the information should be passed encrypted. You should make sure you write the form handler carefully, so the information is stored where it can't be accessed from the web.

Disclaimer: I don't really know anything about this. But I have read horror stories about clueless setups where the user is shown all sorts of "certificates" (of all sorts), but once the script gets the CC number it emails it to the client in plain text. That's sort of why all the "certificates" in the world are essentially meaningless.

What kind of programming experience do you have? What kind of computer security experience do you have?

If you're still using third-party form-to-email services, then you're probably better off paying a third-party service to handle the credit card transactions. Handling credit card transactions securely is a non-trivial task, and the consequences of making mistakes can be severe.

If you haven't found a solution to your problem yet I can make you a Joomla website that will take care of the whole ecommerce and check out procedure for you and it doesn't cost that much either.

Thanks,
Calgary Movers
Pattaya Guest House and Restaurant