Re: Crypted fields
- From: "Claude Lec" <livresplus@xxxxxxxx>
- Date: Sat, 18 Mar 2006 13:00:43 +0100
Thank you for your advise. I did check on the server I use for my internet
site and it seems that they do that. I will contact them next week
Cost 130euro to instal it and 15 euro per month which is quit good I think
regards to all
Your favorit bookseller
claude
"Sam Remek" <sam@xxxxxxxxxx> a écrit dans le message de news:
4419d5b4$1@xxxxxxxxxxxxxxxxxxxxxxxxx
Claude Lec wrote:
hIClaude,
D7 + perl
As a bookseller I have a internet site with form to order books. I
generate
those forms direct from my software
I have a script in perl which send a email with the filled fields
I have a field where people can give there visa number.
Now it is not crypted. It is to expensive for me to get through the bank
to have those calles secure system.
Is there a way in perl or in delphi to put in each form a small program
to crypte this number with a public key
or another way to do it?
Thanks
claude
If I understand you correctly, you have a web form where the user enters
the order and when they press Submit, it sends you an email with the order
information?
If that is the case, then you need to do 2 things.
1) You need to make sure your order form is using SSL at the browser
level. (Is the padlock locked in the browser status bar?) If you don't
have SSL, then the transmission of the order can be intercepted before it
reaches your email server. You can get SSL certificate from Thawte or
GoDaddy etc and your ISP needs to install it on your webserver. It costs
around $50-$100 for 2 years.
2) You also need to encrypt the data when it reaches your email server.
Otherwise someone who gains access to the emails as they sit on the server
can read your orders. (SSL only protects the transmission of the data, not
the storage of the data). We use PGP on the webserver to encrypt the data
(your ISP needs to have it installed), and then when the email reaches our
computer in our office, we have to open the email using PGP client.
This ensures the data is always encrypted, from the user's machine using
SSL, to the webserver, and finally on your machine. If someone steals your
computer that has the email, it is still encrypted (using PGP).
Sam
.
- References:
- Crypted fields
- From: Claude Lec
- Re: Crypted fields
- From: Sam Remek
- Crypted fields
- Prev by Date: Re: Reaching the limits?
- Next by Date: Re: Suggest reporting tool
- Previous by thread: Re: Crypted fields
- Next by thread: ANN: ReportBuilder 10.02 is now available for Delphi 2006, Delphi 2005, Delphi 7, and Delphi 6!
- Index(es):
Relevant Pages
|