Let your payment gateway handle it. Just store the reference number they give you in your database, and look it up in their web interface later if you need it.

Let your payment gateway handle it. Just store the reference number they give you in your database, and look it up in their web interface later if you need it. Don't let the number even touch the disk!