Demaestro - 10:31 pm on Feb 17, 2006 (gmt 0)  I think you are
making a mistake storing them.  Once you store them in the db
then is the form that the sales people use to retrieves the data
so they can complete the transaction going to be behind SSL? It
better be. And only doing 3-4 sales a week is not a reason to
keep them in a db. Is it ok if only 3 people's CC get maxed out
because of unsecured data transfer?  Also don't forget when a
sales person brings up the CC info to fulfill the order that the
form data may be saved by the browsers cache and may end up in
the drop down history of text boxes. And will they be in the
brswer cache itself? YES! Unencyped? YES!  Don't do it. Just
don't it is the wrong way to do it. It is just wrong. I don't
want my CC in someones office computers browser cache history.
Also don't forget what your privacy policy would have to state.
And as mentioned above you may be violating some agreement with
your credit card transaction company.  The fact is if you want
to do this you w