Secure Section of Web Site

[audiopro]

I am developing a shopping cart using a combination of PERL and HTML and I have a question regarding the secure payment section.
I understand the concept of secure servers and payment transactions but I need to clarify which details need to be passed within the secure section and what is usually processed "unsecure".

The selection of items, by the visitor is obviously carried out under "unsecure" conditions.
The payment section will be under secure conditions.
What about the address / shipping details?
I will need to gather the address details and store them somewhere in order to have that information available when the transaction has been approved by the bank.
This raises some important data protection issues which I would like to get right first time.
My intention is to store the address details within the secure section but would welcome comments from anyone who has experience of setting up such a system.


Keith

http://www.studiosoft.co.uk

 

[Foamcow]

The way that Zen Cart (and OSCommerce - on which Zen Cart is based) does it is to encrypt the card number and store it in a database.

Then it emails the outer digits (those at each end) of the card number to the vendor.

The remaining digits are stored within the Order system as plain text. Together with CVV2 number etc.

This means that you can't get the full number unless you have access to both the email AND the order section.

That said, I have only very briefly looked at Zen Cart and may have understood it incorrectly.

There is an OSCommerce forum here Forum:909

Foamcow Heavy Industries - Web design and ranting
Toccoa Games - Day of Defeat gaming community
Target Marketing Communications - Advertising, Direct Marketing and Public Relations
"I'm making time