Paypal Pro, Encryption and lots more...

robbied72 · Sep 24th, 2007, 08:29

I am setting up a site that uses Paypal Pro and SOAP to do the transaction in ASP and I need to know as the site payment form resides on the clients website whether I should setup a SSL certificate on that particular page?

We have one that is ready to instal but have never done it before so any advice would be welcome.

The server is a dedicated Windows 2003 one and I have root access so there will be no phoning of hosts and waiting for instalations. Additionally he wants to store credit card details including end month, end year and CVV2 numbers, should I do this and have you any comments on security for encryption and decryption? I have a DLL file installed to encrypt the numbers to MD5 but am having trouble decrypting them when they are requested

Thanks in advance

Robbie

alexgeek · Sep 25th, 2007, 23:44

md5 is one way..

robbied72 · Sep 25th, 2007, 23:51

Quote:

Originally Posted by alexgeek

md5 is one way..

Hi Alex, found that out now, it's ok if it's a password as you just compare, but what I want to do is retrieve them and decrypt them at runtime

. nevermind, i'll see if i can get a com object to do what i need to do.

alexgeek · Sep 25th, 2007, 23:56

Quote:

Developed in 1994, MD5 is a one-way hash algorithm that takes any length of data and produces a 128 bit "fingerprint" or "message digest". This fingerprint is "non-reversible", it is computationally infeasible to determine the file based on the fingerprint. This means someone cannot figure out your data based on its MD5 fingerprint.