Where are the orders kept on server?

[JMK2]

We use a simple 16 bit application that looks in a tab delimited file and uses our modem to dial-up our bank and process credit card orders through IVR (Inteactive Voice Processing). To make life simple, I use a batch file to launch the IVR program, launch a macro that I write in Access that exports the credit card numbers to a tab delimted file that the IVR software uses and so on...

I just realized I don't know where the orders are kept on the server although it was easy to find them in Access once they were downloaded. It would seem to me that it must be in your cgi-bin directory in an encrypted form, and when you download them it is your client-side security key in Actinic that allows you to decrypt them? Obviously they cannot be left on the server in some form any site ripper can access.

[rmladden]

Look for .ORD files in the acatalog folder. They are deleted once downloaded.

[JMK2]

Thanks Bob,

How's the security on those files, pretty good I would assume?

Is this the purpose of your encryption key, it is what decrypts them?

[NormanRouxel]

As I understand it the credit card details are stored on the server encrypted using a 1024 bit key (see Housekeeping / Security) and the files have their permissions set to 000 so you can feel pretty secure that no-one can do anything with them.

More details are on www.actinic.co.uk where there are some "Security" documents.


Norman

[zmagyar]

As I understand it the credit card details are stored on the server encrypted using a 1024 bit key (see Housekeeping / Security)

Correct. Further to this the whole order detail (including the already heavily encrypted CC details) is encrypted by using a "light" (compared with 1024bit) method. So not only the CC details but all the order details are in safe.

Regards,

[JMK2]

Thanks to both for that information, I'll have a look at those documents. Good system in that it still makes it easy to use some macros in Access to help process the order. Once it is client side.