we want to allow users of our site to save a credit card on file so they can do quick purchasing, but I don't want to store their numbers in a database because of security. I was thinking store all their account info in our db, but store the credit card in a cookie? or possibly store half the card number in a cookie, and the other half in the DB?

what do you think?