what do i do with CC#'s?

[typecero]

I have to get customer CC#'s to proccess orders, and for now i am going to be proccessing the credit cards at the office, through the credit card machine, i know that you cant store them in a database that is a no no...but the problem is i cant charge the credit cards until i have the product in stock...correct? so what do i do with the card numbers between the time they order a product and i can ship it?

[Pweb]

It's OK to store them in a local database on a local machine - without the Internet access. That's what I'd do.

[Abstraction]

It wouldn't hurt to encrypt them too.

[typecero]

thanks guys! ...but how do i get the credit card number from when the client inputs it to mylocal database? store it on the server for a little while??

[Abstraction]

I would recomend storing the credit cards numbers on a machine that's connected to the internet as little as possible. You will also want to look in to SSL.