Personally, I avoid it at all costs - let a large organisation with all the associated security, insurance etc such as Worldpay handle these things...also, search the archives of this list - I believe there was a protracted discussion of this a few weeks ago... Chris -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php