ASP Form Security

[vanstory]

So I've created an ASP form which submits information to a mySQL
database table. This information will be downloaded via ODBC on a
daily basis. Now some of this information is stuff like credit card
numbers. What are my options as far as securing the form submission?
We will also be looking for a hosting company, so any suggestions of a
company that would work with us on getting this setup, would also be
helpful. Thanks a lot!

[Michael Vilain]

In article <11*********************@z14g2000cwz.googlegroups. com>,
va******@gmail.com wrote:

So I've created an ASP form which submits information to a mySQL
database table. This information will be downloaded via ODBC on a
daily basis. Now some of this information is stuff like credit card
numbers. What are my options as far as securing the form submission?
We will also be looking for a hosting company, so any suggestions of a
company that would work with us on getting this setup, would also be
helpful. Thanks a lot!

Buy an internet domain name.
Find an ISP that offers SSL certificates for your domain.
Buy a SSL certificate from a reputable company or through the ISP (e.g.
http://www.thawte.com/).

--
DeeDee, don't press that button! DeeDee! NO! Dee...

[Pedro Graca]

va******@gmail.com wrote:

So I've created an ASP form which submits information to a mySQL
database table. This information will be downloaded via ODBC on a
daily basis. Now some of this information is stuff like credit card
numbers. What are my options as far as securing the form submission?

HTTPS

--
Mail to my "From:" address is readable by all at http://www.dodgeit.com/
== ** ## !! ------------------------------------------------ !! ## ** ==
TEXT-ONLY mail to the whole "Reply-To:" address ("My Name" <my@address>)
may bypass my spam filter. If it does, I may reply from another address!

[CJ Llewellyn]

<va******@gmail.com> wrote in message
news:11*********************@z14g2000cwz.googlegro ups.com...

So I've created an ASP form which submits information to a mySQL
database table. This information will be downloaded via ODBC on a
daily basis. Now some of this information is stuff like credit card
numbers. What are my options as far as securing the form submission?
We will also be looking for a hosting company, so any suggestions of a
company that would work with us on getting this setup, would also be
helpful. Thanks a lot!

1) Scrap your Windos server and ASP pages

2) Rewrite your pages in php bearing in mind all the security points listed
in the documentation

3) You need to run a Web Server that has a Digital Certificate, which
basically means a dedicated server.

4) Use Secure Shell port forwarding to download the MySQL data

Altenatively consider using a 3rd party credit card processor such as Paypal
or Worldpay.