PCI 合规性 - 存储计费数据
我正在开发一个购物车，如果可能的话，想存储：
名称 帐单地址 邮政编码
存入 MySQL 数据库。这会很好，因为回头客不必在每次结帐时重新输入帐单信息。我不会存储任何信用卡数据。
这样做是否会违反 PCI 标准？
I am developing a shopping cart and if possible, would like to store:
Name
Billing Address
Zip Code
Into a MySQL database. This would be nice because returning customers wouldn't have to re-enter billing information each time they check out. I am not going to store any credit card data.
Would I be in violation of PCI standards by doing this?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（2）
PCI 合规性不涵盖客户姓名、地址等的存储。它涉及信用卡数据的处理。从 PCI 合规性的角度来看，只要您以纯文本形式存储的信用卡的最后 4 位数字不超过，您就可以存储客户的账单信息以供将来访问时使用。
当然，具有超级安全意识并加密存储所有客户信息永远不会有什么坏处，但只要您注意存储信用卡，您应该可以存储客户姓名、地址等。
PCI Compliance does not cover the storing of a customers Name, Address etc. It deals with the handling of credit card data. From a PCI compliance perspective as long as you store no more than the last 4 numbers of the credit card in plain text you should fine to store the customers billing information for use on a future visit.
Of course it has never hurt to be super security conscience and to store all customer information encrypted, but as long as you are noting storing credit cards you should be fine to store customer name, address etc.
我认为你可以加密并存储它们。然后你必须在使用之前解密它。您无法在任何地方显示它已解密。
I think you can encrypt and store them. Then you have to decrypt it before using. You can't show it decrypted anywhere.