python - Security for payment processing API call -


i trying api call able deposit money account. wondering if following procedure acceptable, security-wise.

  • 1) user enters credit card information sent braintree.
  • 2) store customer_number in our database user's payment info.
  • 3) allow user enter in following api call add balance. need enter in cvc number again confirm.

url = 'https://example.com/add_to_balance/' requests.post(url, data = {         api_key = '123456',         api_secret = '131313',         cvc = '1234',         amount_in_usd = '4.00'       }) 

would following api call add $4.00 user's account ok. if not, added improve this? ultimately, i'd user able add balance via api our server, , not in web form.


Comments

Popular posts from this blog

c++ - QTextObjectInterface with Qml TextEdit (QQuickTextEdit) -

javascript - angular ng-required radio button not toggling required off in firefox 33, OK in chrome -

xcode - Swift Playground - Files are not readable -