Let your payment gateway handle it. Just store the reference number they give you in your database, and look it up in their web interface later if you need it.<p>Don't let the number even touch the disk!