I'm developing a banking software using php and that will be used over the internet. What are some of the security steps I should take in db design, programming, hosting...? thanks.
closed as not a real question by AviD♦ Aug 2 '12 at 8:01
It's difficult to tell what is being asked here. This question is ambiguous, vague, incomplete, overly broad, or rhetorical and cannot be reasonably answered in its current form. For help clarifying this question so that it can be reopened, see the FAQ.
This is probably not what you want to hear, but...
DO NOT DO THIS.
Security is a huge and complex field, and even big companies get it hideously wrong on a regular basis. Add this to the fact that you want to deal with financial information, and you've got a legal quagmire to wade through too. The policies and legislation alone involved in such a project is enough to fill several books.
I wouldn't attempt such a project myself. It's a huge undertaking and requires extensive technical and legal experience.
If you're really interested in security, spend some time reading questions and answers on here, and researching these topics until you feel comfortable with the concepts involved. Hopefully, then, you'll understand why we give this advice.
100% agree with polynomial. But a few more tips.
PS: I have no experience designing any banking software like this, and this is just the tip of the iceberg.