In some countries it's even illegal to store credit card information and that should be avoided unless absolutely impossible! 

If you stored it and it leaks, you can be made responsible if it wasn't secure enough.

 

My code above contains a bug by the way, one I fixed but left in this snippet of code. Can't be too secure.

The issue is in the creation of the random hash...