I am working in PHP on a Linux server with MySQL.
I have a requirement (that I have attempted to talk them out of) to collect credit card information from users so tha
I suggest you follow the Card Industry PCI compliance closely at least. Here is a PDF document.