Post by jonathan » Sat Aug 29, 2009 10:55 am

I know i've seen offline credit purchases module for sale on another site but this should be easy to integrate into the core. I'm looking for the ability for encrypting card numbers to a database and organizing customer order then processing the card at the brick and mortor store. Is anyone working on such an option? I'm not sure if there are any free modules i can try but i'm not convienced on buying one i might not use and am not sure is safe.

I should say that this function is requested by a client of mine so i can't use another merchant option, ie paypal, due to the cost he paid for businesses card processing set up. Also i need to ensure him that the transactions will be secure. This option could send me looking at other carts if i can't find a suitable solution.

jonathan

Newbie

Posts

Joined
Sat Aug 29, 2009 10:32 am

Post by Qphoria » Sat Aug 29, 2009 11:51 am

The latest version of my offline cc module does have encryption. It is available now from my store:
offline_cc_encrypted_db.jpg

offline_cc_encrypted_db.jpg (14.2 KiB) Viewed 3221 times

offline_cc_admin__encrypt.jpg

offline_cc_admin__encrypt.jpg (18.27 KiB) Viewed 3221 times


Image


User avatar
Administrator

Posts

Joined
Tue Jul 22, 2008 3:02 am

Post by nmormino » Wed Oct 07, 2009 11:25 pm

Qphoria, I purchased this module from you. One thing I would like changed is the cvv number. I don't want to collect or store this information, because PCI Compliance forbids storing it. Is there a quick way for me to remove it from the module?

thanks!

Newbie

Posts

Joined
Thu Jul 02, 2009 10:00 pm

Post by Qphoria » Wed Oct 07, 2009 11:52 pm

Edit:
catalog/controller/payment/offline_cc.php
Find and delete:

Code: Select all

, cc_cvv = '" . $ccCVV . "'
But then you can't use it for processing cards?! ???

Image


User avatar
Administrator

Posts

Joined
Tue Jul 22, 2008 3:02 am

Post by nmormino » Thu Oct 08, 2009 12:06 am

sure you can, payment gateways will accept payments without that code. the code is there for added protection against fraudulent purchases. Storing though is explicitly prohibited by PCI compliance.

to show you in the actual document, I'd have to download the PDF from https://www.pcisecuritystandards.org/ but this website also talks about it and what you can/cannot store. http://tinyurl.com/6fgtac

Newbie

Posts

Joined
Thu Jul 02, 2009 10:00 pm

Post by Qphoria » Thu Oct 08, 2009 4:34 am

I've found it depends. I have an authorize.net account and I can require or make optional certain fields to use as part of the verification step. So if i was required then I would need it. All the same... do what you want with it.

Image


User avatar
Administrator

Posts

Joined
Tue Jul 22, 2008 3:02 am
Who is online

Users browsing this forum: No registered users and 1 guest