{"action":"created","issue":{"url":"https://api.github.com/repos/affiliatewp/AffiliateWP/issues/517","labels_url":"https://api.github.com/repos/affiliatewp/AffiliateWP/issues/517/labels{/name}","comments_url":"https://api.github.com/repos/affiliatewp/AffiliateWP/issues/517/comments","events_url":"https://api.github.com/repos/affiliatewp/AffiliateWP/issues/517/events","html_url":"https://github.com/affiliatewp/AffiliateWP/issues/517","id":54942399,"number":517,"title":"Collecting tax ID info on the settings tab of the affiliate area  ","user":{"login":"sumobi","id":52581,"avatar_url":"https://avatars.githubusercontent.com/u/52581?v=3","gravatar_id":"","url":"https://api.github.com/users/sumobi","html_url":"https://github.com/sumobi","followers_url":"https://api.github.com/users/sumobi/followers","following_url":"https://api.github.com/users/sumobi/following{/other_user}","gists_url":"https://api.github.com/users/sumobi/gists{/gist_id}","starred_url":"https://api.github.com/users/sumobi/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sumobi/subscriptions","organizations_url":"https://api.github.com/users/sumobi/orgs","repos_url":"https://api.github.com/users/sumobi/repos","events_url":"https://api.github.com/users/sumobi/events{/privacy}","received_events_url":"https://api.github.com/users/sumobi/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-01-20T21:28:11Z","updated_at":"2015-01-20T21:29:28Z","closed_at":null,"body":"A customer has suggested including a field to collect tax ID info on the settings tab of the affiliate area. Going to add it here for discussion.\r\n\r\n<blockquote>\r\nHave you considered adding a field to collect tax ID info on the settings tab of the affiliate area, or ask for it during signup? In fact, this might make for a premium add-on. I'd buy it!\r\n\r\nI'd imagine you'd want to make sure SSL is required and the server its being run on is PCI compliant, since you're storing a lot of social security numbers.\r\n\r\nI did some preliminary research, and you'd want to make sure the table in the database is using at least AES128. It might also be a good idea to require a third party plugin like https://wordpress.org/plugins/wpclef/ to reduce security breaches.\r\n\r\nWell, now that I've gotten this far, storing SSN's on a WordPress database seems like a terrible idea. It'd be great if there was a secure way to integrate your affiliate plugin with something more secure than WordPress. I imagine a lot of buyers are using shared hosting and don't have the luxury of modding their servers.\r\n</blockquote>"},"comment":{"url":"https://api.github.com/repos/affiliatewp/AffiliateWP/issues/comments/70737438","html_url":"https://github.com/affiliatewp/AffiliateWP/issues/517#issuecomment-70737438","issue_url":"https://api.github.com/repos/affiliatewp/AffiliateWP/issues/517","id":70737438,"user":{"login":"pippinsplugins","id":1034109,"avatar_url":"https://avatars.githubusercontent.com/u/1034109?v=3","gravatar_id":"","url":"https://api.github.com/users/pippinsplugins","html_url":"https://github.com/pippinsplugins","followers_url":"https://api.github.com/users/pippinsplugins/followers","following_url":"https://api.github.com/users/pippinsplugins/following{/other_user}","gists_url":"https://api.github.com/users/pippinsplugins/gists{/gist_id}","starred_url":"https://api.github.com/users/pippinsplugins/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pippinsplugins/subscriptions","organizations_url":"https://api.github.com/users/pippinsplugins/orgs","repos_url":"https://api.github.com/users/pippinsplugins/repos","events_url":"https://api.github.com/users/pippinsplugins/events{/privacy}","received_events_url":"https://api.github.com/users/pippinsplugins/received_events","type":"User","site_admin":false},"created_at":"2015-01-20T21:29:28Z","updated_at":"2015-01-20T21:29:28Z","body":"I'm really reluctant to start storing tax IDs numbers, especially social security numbers in the DB.\r\n\r\nI'm all for integrating with a service but I really don't think we should allow site owners to store them. Too much risk."}}