[ale] semi OT: secure payment gateway -- php on linux?

[James P. Kinney III]

I'm setting up a RedHat Interchange site for a client. It has the
ability to collect the credit card number through https and email it
with the number encrypted with a GPG public key to an email address as
provided. Since the vast majority Interchange is Perl, you could look at
that for idea. I would be shocked if the "live" merchant verification
that is Internet based is unencrypted in some manner. 

Can you nab the CC info and pump it through a POTS modem automagically?

On Thu, 2002-08-01 at 10:59, jenn at colormaria.com wrote:
> NOW the bossmen want to set up a merchant account. And we need a payment
> gateway.
> 
> We've got a shopping cart written in PHP and we've taken great pains to
> make it more secure than the next guy.  With the payment gateway thing,
> we'll have to somehow pass credit card information to a third party so
> that they verify the cc in real time and pass us back a yea or nay on it.
> 
> I would rather have the payment gateway live on our server and use our
> POTS line to call someone instead of sending this information across the
> vast and evil interweb. But I can't find anything that lives on linux and
> doesn't cost $15,000.  So we're stuck with a 3rd party.
> 
> Anyone doing this?  Anyone have any suggestions about 3rd party
> autentication services that you've used and had success with?
> 
> TIA
> jenn
> 
> 
> 
> ---
> This message has been sent through the ALE general discussion list.
> See http://www.ale.org/mailing-lists.shtml for more info. Problems should be 
> sent to listmaster at ale dot org.
-- 
James P. Kinney III   \Changing the mobile computing world/
President and CEO      \          one Linux user         /
Local Net Solutions,LLC \           at a time.          /
770-493-8244             \.___________________________./

GPG ID: 829C6CA7 James P. Kinney III (M.S. Physics)
<jkinney at localnetsolutions.com>
Fingerprint = 3C9E 6366 54FC A3FE BA4D 0659 6190 ADC3 829C 6CA7 



 This is a digitally signed message part