python - Security for payment processing API call -
i trying api call able deposit money account. wondering if following procedure acceptable, security-wise.
- 1) user enters credit card information sent braintree.
- 2) store customer_number in our database user's payment info.
- 3) allow user enter in following api call add balance. need enter in cvc number again confirm.
url = 'https://example.com/add_to_balance/' requests.post(url, data = { api_key = '123456', api_secret = '131313', cvc = '1234', amount_in_usd = '4.00' })
would following api call add $4.00 user's account ok. if not, added improve this? ultimately, i'd user able add balance via api our server, , not in web form.
Comments
Post a Comment