asp.net - Encrypt a Session Object -
First of all: I am working on an e-commerce site that will accept credit cards. To get the "Enter your information" page from the "Enter your information" page, I need to store the information of credit card somewhere, because it should be received before it is eventually sent to the payment gateway. Could.
I am currently leaning towards storing it as a session variable. It is being said, my question is:
- Am I parsing some well-known security in this session?
- Is a session object global? If two people submit their information at the same time, can a person's session be returned to another person's transaction?
- Is there any common way in encrypt / decrypt session objects for additional security?
If you have stored sensitive information in the viewstoat or passed it on the query string, you will definitely need to encrypt it.
/ div>
Comments
Post a Comment