Ken Cochrane has a really good guide to PCI compliance from a developer's standpoint. The main point that it drives home, though, is that you really don't want

Ken Cochrane has a really good guide to PCI compliance from a developer's standpoint. The main point that it drives home, though, is that you really don't want to ever be in a position where you could be touching card-level data. You want to hand that off to Stripe, Braintree, Balanced, PayPal, someone else before it hits your server. http://kencochrane.net/blog/2012/01/developers-guide-to-pci-compliant-web-applications/ http://kencochrane.net/blog/2012/01/developers-guide-to-pci-...