But why are you processing the transactions manually? Why don't make it a automated process?
I don't see an issue processing transactions manually for a site of this nature as long as its kept up with. It keeps everything inline and its the best security method.