New answers tagged banks
I agree that this is bad practice. You can make it better practice by scrambling the answers in one of many ways -- making questions about your father refer to your first car and vice versa, and so on, or giving false answers, or given IRRELEVANT answers (if you can remember what your irrelevant answers were), would discourage/prevent social engineering ...
As a European, I consider my IBAN to be my private information, just like my email address, real name, home address and IP address. I'd like for you to not store any of them, but if you have to, please encrypt them and make sure my information (it's my information, not yours) is secure. So to directly answer your question, yes, encrypt it and don't store ...
Unless you already have experience in the field, then yes, this is too complex for a small web agency. PHP can be used securely, but you have to know what you are doing. As part of a small web agency, I worked on a high security system to manage a bill payment service with many similar requirements to an online banking system. The project never reached ...
All these fields are needed to transfer Euros internationally. Both the UK and Latvia are part of SEPA; WP says: SEPA clearance is based on the IBAN bank-account identification and the SWIFT-BIC bank identifier. The bank name and account number can be derived from the IBAN; they are not strictly needed, but it does not hurt to give them.
Top 50 recent answers are included