CODEWITHSUNDEEP
ruby-on-railssession
bigpotato
bigpotato

Reputation: 27527

Rails + Sessions: Safe to store partial credit card info in session?

I am working on a checkout and I want it so that on the "order summary" page, the user will see their credit card info like Card Number: ************1111, Expiration Date: 12/15. I'm not saving the credit card info since that's against standards, so I'm thinking I could save the last 4 digits of the user's credit card info + the expiration date in my session when the user inputs it on the billing information page so that on the "order summary" page it'll show.

Is this against e-commerce standards?

Upvotes: 1

Views: 177

Answers (1)

Phlip
Phlip

Reputation: 5343

Do it. You are allowed to print "Card Number: ******1111" on a piece of paper, and that's permanent and leakable. Hence you are allowed to store only those 4 characters in your database, and print them at need.

The expiration date, however, IS sensitive (BC it participates in authorization), so lose it.

(2 years working with payment gateways experience here...)

Upvotes: 3

Related Questions