Stop storing Credit Card Number in Database

[hujef]

Hello,

I haven't installed zen cart yet but am considering it. My first question is this:

Can zen cart pass the CC number to the gateway without saving it in the database at all? I realize that if there is an issue with the order, the number will have to be re-entered - probably as a new transaction - but I prefer not to have the liability of storing the number at all if I don't have to.

Thanks,

Hujef

[Kim]

Zen Cart does not store Credit Card numbers in the database when you use a live gateway.

[hujef]

Excellent. Thanks for your response.

So, the CC# is passed through the gateway, I get a yay or nay, and that's that, correct?

I don't have peoples CC#'s hanging around on my server or in my Db to get hacked, right?

That's a major concern for me, and I've avoided commerce for a long time because of it.

[stevesh]

That's right.

The CC companies' PCI compliance rules would prevent you from storing that data, even if you wanted to, without a major expenditure on server security.

[devgu]

That's right.

The CC companies' PCI compliance rules would prevent you from storing that data, even if you wanted to, without a major expenditure on server security.

If CC companies prevent the storing of a cc#, how is amazon.com able to have a feature like 1-click purchase?

Can it be that they are storing cc#'s to the payment gateway?

[stevesh]

Amazon made the major expenditure I mentioned to secure their servers to PCI standards. No one here can afford to do that.

[devgu]

I really appreciate the reply steve, thank you!

Would you know of some US payment gateways that are capable of storing credit card numbers and provided a successful verification will allow for automatic charges to one's credit card?

[stevesh]

Sorry, I don't understand your question.

[devgu]

Are there companies that provide merchant accounts (payment gateway) that can store credit card numbers?

[stevesh]

Such that you can access them to save your customers from having to enter their CC numbers? No.