I'm trying to setup a basic system on my site to accept credit cards for delayed processing. What I will be doing is collecting a bunch of orders/credit cards for a group of people, then after a certain period I will need to process those cards and make the charge.
This is so that a group of people can individually place their order knowing that their card will be processed in X number of days once everyone has placed their order from the group.
My question is what would be the best way to go about doing this? I want to ensure I am accepting Visa/Master Card/American Express and possibly Discover Card. Also, with this system would it be possible to accept Pay Pal information so that I could then process that instead of a credit card for their Pay Pal account?
Also, what is the best way to store these credit cards. Obviously a secure DB and a page that uses SSL for submitting their order, but what all do I need to accept? Obviously card number, CVV, Expiration Month, Expiration Year, can this all be normalized in a database. And what would you recommend for encrypting/decrypting these cards? I will need to decrypt them for processing later on.
Any advice on any of my questions would be great.