asp.net - Encrypt a Session Object -


First of all: I am working on an e-commerce site that will accept credit cards. To get the "Enter your information" page from the "Enter your information" page, I need to store the information of credit card somewhere, because it should be received before it is eventually sent to the payment gateway. Could.

I am currently leaning towards storing it as a session variable. It is being said, my question is:

  1. Am I parsing some well-known security in this session?
  2. Is a session object global? If two people submit their information at the same time, can a person's session be returned to another person's transaction?
  3. Is there any common way in encrypt / decrypt session objects for additional security?

    If you have stored sensitive information in the viewstoat or passed it on the query string, you will definitely need to encrypt it.

    / div>

Comments

Popular posts from this blog

python - Overriding the save method in Django ModelForm -

html - CSS autoheight, but fit content to height of div -

qt - How to prevent QAudioInput from automatically boosting the master volume to 100%? -