one submit button two diff. DB's and one value needs to be encrypted

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • cassbiz
    New Member
    • Oct 2006
    • 202

    #1

    one submit button two diff. DB's and one value needs to be encrypted

    Here is what I want to do, if possible.

    I have a reservation form, where one value (credit card number) needs to be run through an encryption script then get posted to the DB where all of the other fields do not need encryption. Everything is posting over just fine right now to the DB. I would like to encrypt the CC# with the script at the bottom of the page. I got the script from PHPCLASSES.ORG

    Code:
    <tr id="tr1">
            <td class="t1" colspan="2">
            Is your mailing address same as your billing address?
            <input name="addr_copy" type="checkbox" onClick="
            copyConditional(this,
            this.form.strasse,
            this.form.baddress);
            copyConditional(this,
            this.form.ort,
            this.form.bcity);
            copyConditional(this,
            this.form.stadt,
            this.form.bstate);
            copyConditional(this,
            this.form.plz,
            this.form.bzip);
    ">
            </td>
    </tr>
    <tr id="tr1">
            <td class="t1">
                    <? echo $t_forms['card_type'] ?> <br />
                    <select name="card_type" size="1"><!--Maximal Zehn Zeichen-->
                            <option<?php if ($card ==  "") echo " selected"?>></option>
                            <option<?php if ($card == 1) echo " selected"?>><?echo $t_pay['amex']?></option>
                            <option<?php if ($card == 2) echo " selected"?>><?echo $t_pay['carte']?></option>
                            <option<?php if ($card == 3) echo " selected"?>><?echo $t_pay['diners']?></option>
                            <option<?php if ($card == 4) echo " selected"?>><?echo $t_pay['jcb']?></option>
                            <option<?php if ($card == 5) echo " selected"?>><?echo $t_pay['mc']?></option>
                            <option<?php if ($card == 6) echo " selected"?>><?echo $t_pay['visa']?></option>
                    </select>
            </td>
            <td class="t1">
                    <? echo $t_pay['cc_num'] ?><br> <input <?php echo "value=\"$cc_num\""?> name="cc_num" size="30" maxlength="20" <?echo $schreiben?>>
            </td>
    </tr>
    <tr id="tr1">
            <td class="t1">
                    <? echo $t_pay['cc_exp'] ?><br> <input <?php echo "value=\"$cc_exp\""?> name="cc_exp" size="30" maxlength="20" <?echo $schreiben?>>
            </td>
            <td class="t1">
                    <? echo $t_pay['cc_ccv'] ?><br> <input <?php echo "value=\"$cc_ccv\""?> name="cc_ccv" size="30" maxlength="20" <?echo $schreiben?>>
            </td>
    
    </tr>
    
    <tr id="tr1">
            <td class="t1">
                    <? echo $t_pay['b_name'] ?><br>  <input <?php echo "value=\"$bname\""?> name="bname" size="30" maxlength="30" <?echo $schreiben?>>
            </td>
            <td class="t1">
                    <? echo $t_pay['c_name'] ?><br>  <input <?php echo "value=\"$cname\""?> name="cname" size="30" maxlength="30" <?echo $schreiben?>>
            </td>
    </tr>
    
    <tr id="tr1">
            <td class="t1">
                     <? echo $t_pay['b_address']?><br>   <input <?php echo "value=\"$baddress\""?> name="baddress" size="30" maxlength="40" <?echo $schreiben?>>
            </td>
            <td class="t1">
                     <? echo $t_pay['b_city'] ?><br>  <input <?php echo "value=\"$bcity\""?> name="bcity" size="30" maxlength="40" <?echo $schreiben?>>
            </td>
    </tr>
    
    <tr id="tr1">
            <td class="t1">
                     <? echo $t_pay['b_state'] ?><br>  <input <?php echo "value=\"$bstate\""?> name="bstate" size="10" maxlength="10" <?echo $schreiben?>>
            </td>
            <td class="t1">
                    <? echo $t_pay['b_zip'] ?><br>  <input <?php echo "value=\"$bzip\""?> name="bzip" size="30" maxlength="7" <?echo $schreiben?>>
    </td>
    </tr>
    The field cc_num I would like it to run through this script so that it enters the DB encrypted. This way we will be able to retrieve the information later.


    Code:
    <?
    include('clsencrypt.php');
    // Create a new Encryption Object
    $enc = new Encryption;
    $encstr = '';
    $decstr = '';
    if (isset($_POST['encrypt'])) {
        $key = $_POST['keystr'];
        // Encrypt the Source Text
        $encstr = $enc->encrypt($key, $_POST['text']);
    } elseif (isset($_POST['decrypt'])) {
        $encstr = $_POST['enctext'];
        $key = $_POST['keystr'];
        // Decrypt the Encrypted Text
        $decstr = $enc->decrypt($key, $_POST['enctext']);
    }
    ?>
    <FORM action = '<?php echo $_SERVER['PHP_SELF'] ?>' method = 'post'>
    <BR>Original Text<BR>
    <TEXTAREA name = 'text' cols="40" rows="1" wrap="soft"></TEXTAREA>
    <BR>Enter Key String<BR>
    <INPUT name = 'keystr' type = 'text' value = ''>
    <BR><Input type='submit' value = 'Encrypt' name='encrypt'><Input type='submit' value = 'Decrypt' name='decrypt'>
    <input type='reset' name='reset' value='Clear Entries'>
    <BR>Encrypted Text<BR>
    <TEXTAREA name = 'enctext' cols="40" rows="1" wrap="soft"><?php
    if (isset($_POST['encrypt']) || isset($_POST['decrypt']))
        echo $encstr;
    ?></TEXTAREA>
    <BR>Decrypted Text<BR>
    <TEXTAREA name = 'dectext' cols="40" rows="1" wrap="soft"><?php
    if (isset($_POST['encrypt']) || isset($_POST['decrypt']))
        echo $decstr;
    ?></TEXTAREA>
    </FORM>
  • seangates
    New Member
    • Dec 2006
    • 19

    #2
    Here is some reading for you:



    I've read elsewhere that it's not a good idea to store credit card numbers within MySQL when you're on a shared hosting environment, because even if the numbers are encrypted, and even if you have SSL, another person on the shared host could use SSH to read your php files to find your mysql login, and also find out how you


    Short answer: don't do it!

    Sean

    Comment

    • cassbiz
      New Member
      • Oct 2006
      • 202

      #3
      Originally posted by seangates
      Here is some reading for you:



      I've read elsewhere that it's not a good idea to store credit card numbers within MySQL when you're on a shared hosting environment, because even if the numbers are encrypted, and even if you have SSL, another person on the shared host could use SSH to read your php files to find your mysql login, and also find out how you


      Short answer: don't do it!

      Sean
      Hey Sean,

      In regards to your short answer, why?

      Comment

      • cassbiz
        New Member
        • Oct 2006
        • 202

        #4
        OK, I did the reading and I will take your advice and not store the data.

        Comment

        Working...