[Terpaholic]

Unfortunately I'm using PHP, but thank you! I think I'll be going with Stripe for the payment management, now just working on account management (hashing/salting passwords etc) and associating that with the accounts. I've never done this before so it's really like building two projects at once: the software, and the account/payment management system.

[tomfakes]

Find a good PHP bcrypt library and you'll be ahead of 90% of web sites with your password security. bcrypt is the current Rails best practice password hashing solution.

Stripe is good, as you'll never see credit card numbers, so you'll have no security issues to deal with in that area

[krapp]

phpass? https://github.com/rchouinard/phpass