topic Re: Securing the Transaction Key when using SIM in Integration and Testing https://community.developer.cybersource.com/t5/Integration-and-Testing/Securing-the-Transaction-Key-when-using-SIM/m-p/31466#M16401 <P>Just store it outside of your web root. That's all you need to do.</P> Tue, 13 Nov 2012 13:38:02 GMT stymiee 2012-11-13T13:38:02Z Securing the Transaction Key when using SIM https://community.developer.cybersource.com/t5/Integration-and-Testing/Securing-the-Transaction-Key-when-using-SIM/m-p/31408#M16373 <P>How should the transaction key be stored when implementing SIM in PHP on a LAMP server?<BR /><BR />The code samples/SDK for the PHP solution has a placeholder for the transaction key right on the sim.php page, which I don't think is the most secure way to store the transaction key.<BR /><BR />Should I keep the transaction key in my mysql database and if so, what's the right way to have it encrypted while stored in the database and then in plain text in a variable when used in the PHP code? I'm asking for the 'right way' because if this 'the'/'a' good way to store the transaction key, then there should be a recommended way to do it as I know I'm not smart enough to invent my own encryption scheme.<BR /><BR />Perhaps I should store it in an encrypted file. If so, I again ask, what's the right way to manage the file so I can rely on trusted cryptographic methods?<BR /><BR />Are there other options I'm not thinking of, or am I missing the point all together? I don't see anybody else asking this question so maybe I am missing something.<BR /><BR />Thanks in advance!</P> Sat, 10 Nov 2012 21:05:14 GMT https://community.developer.cybersource.com/t5/Integration-and-Testing/Securing-the-Transaction-Key-when-using-SIM/m-p/31408#M16373 turnipcyberveg 2012-11-10T21:05:14Z Re: Securing the Transaction Key when using SIM https://community.developer.cybersource.com/t5/Integration-and-Testing/Securing-the-Transaction-Key-when-using-SIM/m-p/31466#M16401 <P>Just store it outside of your web root. That's all you need to do.</P> Tue, 13 Nov 2012 13:38:02 GMT https://community.developer.cybersource.com/t5/Integration-and-Testing/Securing-the-Transaction-Key-when-using-SIM/m-p/31466#M16401 stymiee 2012-11-13T13:38:02Z