Security of data submitted by users

[Vanessa]

I was wondering whether you have any technique for securing data submitted by users? A typical example is credit card details. We have requirements where we want members of the public to be able to pay for services via eforms. I would appreciate if you could give me some pointers/examples.

[Vanessa]

There are a few things you should consider.

Firstly take a look at the Ebase Secure Forms page of the online help documentation. When dealing with sensitive information like credit cards, you should have a secure HTTPS connection.

It is much more involved than the information in the online help documentation. That simply runs the form using HTTPS instead of HTTP. You still need to configure the application server and request a certificate.

Secondly, if you intend to store credit card information, there is a function 'encrypt' that allows you to encrypt/decrypt the data.

Lastly, for validation purposes, Ebase provides a credit card validator that checks the validity of the number in terms of being in the correct format