HI all. this might be slightly OT but I know that the list has quite a knowledgable crowd =) So here is my situation: I have a client who I have developed a site for in PHP it provides various models for shares forecasts, the way it works is that people register for free (with their credit card details-https) now if they are not satisfied after a month they must just unsubscribe. If they have not unsubscribed after the first month they become a customer and each month their credit card is charged the relevant amount depending on what they have subscribed for. Now our the complication is as follows: I know that storing client's credit card details online is a big NONO, so we would have to move the credit card details offline when they register. Im not sure how to go about this. Whether to save the details in text files somewhere else on the server or save to text files not on the server but another location. Can anyone recommend/advise the best way to do this, also what type of encryption should I be using for the credit card info? thanks in advance. Angelo -------------------------------------------------------------------- Disclaimer This e-mail transmission contains confidential information, which is the property of the sender. The information in this e-mail or attachments thereto is intended for the attention and use only of the addressee. Should you have received this e-mail in error, please delete and destroy it and any attachments thereto immediately. Under no circumstances will the Cape Peninsula University of Technology or the sender of this e-mail be liable to any party for any direct, indirect, special or other consequential damages for any use of this e-mail. For the detailed e-mail disclaimer please refer to http://www.ctech.ac.za/polic or call +27 (0)21 460 3911 -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php