title: Best practices for taking and storing credit card information with PHP
body: <p>Should I use sessions for the first few steps (validation, review purchase) then input the information into the database in the final submit?</p>
  
  <p>Could the cookies get jacked and transform into a lawsuit? Is it too risky?</p>
  
  <p>Would I need to protect my db any special way if storing credit card numbers?</p>
  
  <p>Any and all recommendation and personal experiences are welcome.</p>