Post reply

Security for SQL Server 2012 Complaint with PCI-DSS,

  • March 19, 2015 at 10:27 pm

    #296177

    Hi everyone,

    With PCI-DSS required. End-User cannot use left, right in Query to result full cardnumber. Ex: Select left(cardnumber,12)+'-'+right(cardnumber,4) as Cardno.

    As i know, select left or right is the system function in SQL. How to way invoke end-user use select left, right in query?

    We can write another use function (ex: left_a, right_a) similiar system function for end-user use in query.

    Thanks for you reading.

  • March 19, 2015 at 10:53 pm

    #1785267

    Can you quote the part of the PCI-DSS that says this?

  • March 19, 2015 at 11:12 pm

    #1785273

    Dear guys,

    PCI not recommend use field Cardnumber in all table/DB with end-user

  • March 20, 2015 at 12:25 am

    #1785278

    It is probably referring to storing them encypted and incomplete form, nothing to do with left and right functions.

  • March 20, 2015 at 2:24 am

    #1785284

    Dear man,

    Thanks you for advise. Encrypted DB is a one solution. But, i afraid of Performance when transaction online.

    Thanks you so much.

Viewing 5 posts - 1 through 4 (of 4 total)

You must be logged in to reply to this topic. Login to reply