[thelist] Form Security

[Jack Timmons]

On Tue, Jul 20, 2010 at 10:01 AM, DAVOUD TOHIDY <dtohidy at hotmail.com> wrote:
> However What if the credit card is a stolen one? Do you still let the "<script>Bob</script>" go into your database?

I can only verify it's a valid card (using security code or zip code).
I can't ask them "Did you steal this credit card?" and expect a
truthful response if they did ;).

If it winds up stolen, it's still there. It's not hurting anything but
taking up a little space. I will likely need to keep it there like
that for evidence when we print out fraud reports.

-- 
Jack Timmons
@_Codeacula