Paypal actually has a couple options for having paypal's servers handle the actual card collection so your server never need touch it. That said their API (or

Paypal actually has a couple options for having paypal's servers handle the actual card collection so your server never need touch it. That said their API (or rather APIs as they have one for every day of the week with all sorts of subtle differences) is ... not fun. I know of several implementation in fairly major open source shopping carts/ecommerce platforms that don't properly use paypal to handle the CC data, and I only know that because I was looking for an actual example as PayPal doesn't make it terribly easy. Also, the receipts filter nicely into a folder and then you never see them again.