Hello all good people on this discussion !
I have a bigger a form with and . The form contains sensitive personal information, the client and other data. I need display the form to email as well as is on the website, but maintain the security of personal data.
What method I have to submit the form?
Please advise !
Thank you in advance for your advice.
You have two problems with sensitive information
Transportation
In order to get the data securely from the user to the server you will need to use SSL/HTTPS, get a real certificate to let the users know the identity of the site has been verified. You should also POST all data, as GET will transport the data in the query string (URL), which will litter the data all over server logs and wherever else the URLs are harvested.
Storage
Much harder to achieve, depending on the sensitivity level you may not want to do this at all. Ie credit card info and/or other highly sensitive information is best not to touch. Please note that just getting this data to the server will usually be enough as it’s instantly stored in memory and whatnot. For CC info you should use a third party, like Stripe.
When using the GET transfer of code in PHP is the same? If not, how do they differ?
I am no expert in php !!!
If you use GET to transfer something like an article id (yoursite.com/article.php?id=12) that’s fine, it makes sense to have that in the logs as that tell you which article was viewed.