title: What kind of security do I need for when having a database that holds back accounts and credit card details?
body: <p>I'm a newbie when it comes to security. I've read posts that mentioned that encryption alone doesn't make an app,website or database secure.</p>
  
  <p>I'm also new to certificates and stuff. I've barely touched these things but I'm gonna create a website that connects to my local testing database for the purpose of testing the security and as temporary playground.</p>
  
  <p>It's basically like UBER. I want to prevent the server/database from being accessed and to prevent data from being stolen, what kind of security system do I actually need for this type of website or service?</p>
  
  <p>PS: Currently I'm using Bitnami WAPP stack. I use Apache/PHP combined with PostgreSQL.</p>