Do I need to be PA-DSS certified?

[Feznizzle]

Hi,

I am preparing to set up a site for a client from scratch, trying to decide between v150 and v151.

They will be using Authorize.net and Paypal (and possibly Google Checkout). They will probably be doing less than 20k transactions annually. I very much would prefer to use v151, think it will be fine since they are not storing credit card info on their website.

But I am concerned (a bit) that v151 is not PA-DSS certified.

Given the merchant solutions suggested above, will it be safe (not cause additional aggravation/work) to go with v151?

Thanks,
Mike

[schoolboy]

Hi,

I am preparing to set up a site for a client from scratch, trying to decide between v150 and v151.

They will be using Authorize.net and Paypal (and possibly Google Checkout). They will probably be doing less than 20k transactions annually. I very much would prefer to use v151, think it will be fine since they are not storing credit card info on their website.

But I am concerned (a bit) that v151 is not PA-DSS certified.

Given the merchant solutions suggested above, will it be safe (not cause additional aggravation/work) to go with v151?

Thanks,
Mike

Rule One:
When doing a FRESH INSTALL, always use the latest version.

[Feznizzle]

Rule One:
When doing a FRESH INSTALL, always use the latest version.

That is what I was hoping to hear. However, I notice that several of the mods I need to use are current for v150, not yet v151. A list of mods I am considering appears here:
http://www.zen-cart.com/showthread.p...n-products-%29

Thanks, schoolboy!

[schoolboy]

Best way to see what's changed in ZC versions is to visit the CHANGELOG between 1.5.0 and 1.5.1 , then look at the mods and if the mods make alterations to CORE files, then do a winmerge between the mod's file and the ZC counterpart. Look for really dramatic differences first, and particularly for elements that may be deprecated.

If a mod works on 1.5.0, it is very likely to work on 1.5.1 ... but there is no guarantee.

I always try mods in a DEV environment - never on a live site.

Also... I believe in using as FEW ADDONS AS POSSIBLE !!! There has to be a COMPELLING BUSINESS REASON why I add a mod.

The FEWER the mods, the better.

For some people, "few" might mean 30.
For others, "few" might mean 2.

Only you can know what mods you need - but as I said, I always need a really good business reason to include a mod.

[Feznizzle]

Once again, very sage advice schoolboy.

I think what I will do gather the v151 ready mods in one folder, the v150 in another. Then, as you advise, I will go thru the CHANGELOG and compare.

Thanks again!

[RodG]

But I am concerned (a bit) that v151 is not PA-DSS certified.

Unless the site processes/stores the customers CC details you don't need to worry about PA-DSS certification.
Processing CC's via PayPal or other payment service is not the same as processing cards on the merchant site/store.

Given the merchant solutions suggested above, will it be safe (not cause additional aggravation/work) to go with v151?

Yes.
PS-DSS isn't about safety or security. It is about accountability.

Cheers
Rod