[FX.php List] Anyone done a PHP integration w/ Paypal?

[BEVERLY VOTH]

ditto. We stopped storing anything (not even the last 4 digits!) and just store the authorization returned. It's really all you need should you have to contact PayPal (or any payment gateway) for more information. Plus, if your client has a PayPal account (required to use the gateway), then they/you have a way to login and check more information (not CCard info) on the payments made.

Beverly

On 05 Dec 2013, at 12:34 PM, John May wrote:

> We used to store cards for recurring billing.
> 
> Even encrypting in a local database won't satisfy the PCI gods to get you out of SAQ D and a QSA audit.