I have a potential client who runs a music club. This particular client wants to implement a secure web form for selling tickets to events at his club. He is looking for a simple form that would transmit all information, including credit card numbers, to his email account. He would then process the transaction on his own and those who purchase tickets will be placed on will call.
I am not an expert programmer, I know PHP and some basic ASP, but I do not have any real experience dealing with e-commerce. I expressed a concern with security issues to this client, and suggested a third party ticketing system such as Ticketweb, or even Eventbrite which has a WordPress plugin. He informed me that he would like to use one of these services, but at the moment he does not sell enough tickets in advance to justify the costs.
Does anybody have a suggestion? What would be the best way to setup this webform to ensure that hackers cannot intercept credit card numbers in transit? Is this something that can be done safely and securely with some good PHP coding? Or would he need an expert on ASP or Cold Fusion programming to do it right?
Any suggestions are welcomed and appreciated. Thank you.