Secure Mysql

[daverose]

Hi,

 

I am planning to purchase an SSL certificate for my company to begin selling goods via our Web site. However, contrary to common practice, our office manager will be manually keying in the customer's payment info into our credit card terminal rather than this happening automatically.

 

The current plan is to secure the online store with SSL and send half of the customer's credit card number to us by e-mail and drop the other half into a database. This way, if either our e-mail server or TCH's databases were compromised, the customer would most likely still be safe.

 

Is there an equivalent of SSL available for the database itself to provide extra security for the customer's saved information (address, phone, 1/2 of CC#, etc.)? Is it even necessary?

 

Thanks!!!

 

Dave