I want to know how to secure credit card order with blank mail.
My boss instructing to create new site like as below: 1) User send "Blank e-mail" to new site. 2) The site returns mail including URL, the URL is display credit card number to start payment. 3) After input credit card number and press OK, then display input CVV2 code page. The input page is provided by credit-card company. 4) Payment is completed, then the site returns PIN code to the e-mail address.
We use "Blank e-mail" feature to get "from address".
The boss said, we always use CVV2, so the system is secure. But I think it is not secure because there are no limitation about try other CVV2 code with same credit card number. And the system does not have membership, so there are no login system. First target OS is smartphone (android and ios), and second target will PC.
Is there any idea to more secure the system, or any succeeded site with similar style, please let me know.