How can I make this sort of payment form secure?