如何获取 Paypal 定期付款资料的信用卡详细信息
我正在使用直接付款创建定期付款配置文件(注册期间输入的信用卡详细信息不存储在数据库中)。我想更新/更改每个账单周期的账单金额(因为账单是按每个用户每月完成的)。
我正在使用 UpdateRecurringPaymentsProfileDetails API 方法来更改金额,但该方法再次需要信用卡详细信息(每次调用时)。我使用 GetRecurringPaymentsProfileDetails 获取信用卡详细信息,但此方法仅返回信用卡的最后 4 位数字(并且不返回 CVV2,但这不是这里的主要问题)。
是否有其他选项可以使用 Paypal API 获取完整的信用卡详细信息(至少是信用卡号),或者我是否必须将信用卡号存储在数据库中?任何帮助将不胜感激。
I am creating a Recurring payment profile using Direct payment(credit card details entered during registration are not stored in database). I want to update/change the bill amount for every bill cycle(because billing is done per user per month).
I am using UpdateRecurringPaymentsProfileDetails API method to change the amount, but the method needs credit card details again(for each time it is called). I am getting the credit card details using GetRecurringPaymentsProfileDetails, but this method just returns the last 4 digits of credit card(and does not return CVV2, but this is not major issue here).
Is there any other option to get the full credit card details(at least credit card number) using Paypal APIs or should I have to store credit card numbers in my database? Any help would be highly appreciated.
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(1)
您不太可能从 PayPal 获得完整的信用卡号;这就是人们使用 PayPal 的原因。
在数据库中存储信用卡信息是一项巨大的责任,应尽可能避免。一旦您开始存储该信息,您的公司就有责任确保该信息的安全(包括开发人员)。如果必须的话,可以使用其他第三方组件,但不要承担如此巨大的责任。
我不知道你在哪家公司工作,但这不是开发人员应该自己做出的决定。多家公司因信用卡信息处理不当而被关闭。有关这些东西的法律极其模糊,即使是最小的错误也可能导致巨额罚款。
It's unlikely that you'll be able to get the full credit card number from PayPal; that's why people use PayPal.
Storing credit card information in your database is a huge liability, and should be avoided if at all possible. Once you start storing that information, your company is responsible for keeping that information secure (and that includes developers). Use another third party component if you must, but don't take on such an enormous liability.
I don't know what company you work for, but that's not a decision that a developer should be making on their own. Entire companies have been shut down for mishandling credit card information. The law around that stuff is extremely murky, and even the smallest mistake can result in massive fines.