Your best bet is to use a third party application that is PA-DSS compliant or you expose yourself to all sorts of liability issues. Generally your payment processor will have an application they support, or will point you in the right direction.

>Can anyone recommend a good way to handle this? There will be a tiny number of transactions. I really don't want to have to re-invent the wheel & was wondering if anyone has any pointers or suggestions...
>
>Thanks!