I need to know the best scenario for a merchant inserting client's credit cards and expiry dates to process recurring payment for these cards. What I have in mind (and want your expert suggestions please) is the following:
- form to be filled with credit card information
- normal post with https to a php page having function for encrypting the credit card with random encrypt key
- saving the encrypted card and the key in different locations in mysql when processing the payment
- getting the encrypted credit card and the key and use a decryption function to process the payment with curl to the gateway
credit card encrypt/decrypt sample: http://www.walkswithme.net/credit-card-validation-and-encryption-using-php
do you have any comments on the above, or better scenario?