Running Credit cards by hand

[edux10]

I have a credit card processing machine and account. I want to be able to have people pay by credit card, see their card number on the admin invoice, then run it by hand on a credit card machine.

basically without a gateway, i want to get the number then punch it in on my machine.

how do i do this? do i need an add on? which one? I could not figure out how to do this thru basic zencart installation.

Please, any help would be great. Its the one thing keeping my store from going live. Much appreciation for any help.
Thanks!!!

[frank18]

The CC payment module was a feature in previous ZC versions. It has been discontinued for security reasons and PCI compliance.

[stevesh]

And the way you've described it (full CC number in the admin email) is a violation of PCI regulations and may be illegal.

Search the Free Software Add Ons for ceon manual card, but I think you're making a mistake. You'll open yourself up to liability if something goes wrong, and many people, including me, won't buy from you if we know you're handling our CC information in such an insecure way.

Payment processing isn't that expensive.

[edux10]

thanks for the responses guys!!

really helped me out on this one.

i will look into the add on and run the gateway by the owner.

I am on a secure server with a domain name with its own ssl certificate. still unsafe?

[stevesh]

Still unsafe, in part because email is inherently insecure. Also, as your customer, I don't know how you handle my information after you get it. I've seen offices where regular customers' CC info was stuck to monitors on Post-It notes, visible to visitors, cleaning staff, etc.

[edux10]

wow, cc info on a post it note is a bad ider...

I wasnt necessarily saying to email the admin the cc info but rather store it in the database to run on the terminal later. but yeah, i understand the liability of having cc info laying around.

We were thinking we were going to be able to have an invoice for the admin with the cc info, we would print that, run the card, card is good, shred the invoice and clear the card from the database. I can see where people could be leery tho, because who know what a shifty person may do with the info.

Store owner is a trusted and respected member of the community but I know anyone can say that. I may possibly be the best option to use the built in authorize.net

you rock for helping so fast.

[edux10]

EDIT: after further reading i have a better understanding of the process and will probably have to go with the authorize.net gateway and keep the merchant account we already have. that sounds like they way it would work, correct?

[DrByte]

Yes, just add the gateway to use the existing merchant account. Use the link on the Recommended Services page (see link at top of screen)