Ceon Manual/Offline Card Payment Module v1.0.0!

[Vger]

Below is a snippet, and a link to a full article which goes into some depth to explain this. What's not in the article is the requirement to keep credit card data on a separate server - but this is how it is being applied in practice:

Payment Card Industry Data Security Standard
Build and Maintain a Secure NetworkRequirement
1: Install and maintain a firewall configuration to protect data Requirement
2: Do not use vendor-supplied defaults for system passwords and other security parameters Protect Cardholder Data Requirement
3: Protect stored dataRequirement
4: Encrypt transmission of cardholder data and sensitive information across public networksMaintain a Vulnerability Management Program Requirement
5: Use and regularly update anti-virus softwareRequirement
6: Develop and maintain secure systems and applicationsImplement Strong Access Control Measures Requirement
7: Restrict access to data by business need-to-knowRequirement
8: Assign a unique ID to each person with computer accessRequirement
9: Restrict physical access to cardholder dataRegularly Monitor and Test NetworksRequirement
10: Track and monitor all access to network resources and cardholder dataRequirement
11: Regularly test security systems and processes.Maintain an Information Security PolicyRequirement
12: Maintain a policy that addresses information

The devil is in the detail, some of which is listed in the full article:

http://64.233.183.104/search?q=cache...k&ct=clnk&cd=1

And this quote from Protx:

Recently Visa, MasterCard and other major card schemes have introduced security audits to ensure that all merchants who collect credit card data comply with strict guidelines surrounding the collection and storage of credit card data.

VSP Direct merchants collect credit card data on their own website and will be asked by their bank to undergo an audit to ensure that data is kept secure at all times.

Alternatively, if you do not wish to undergo such an audit, then you can outsource the collection of credit card data to Protx, by using VSP Form or VSP Server.

Vger

[Ryk]

Thank you for that as I'm just about to explain this to a customer.

[conor]

Hi,

What Vger says is true and is something we reinforce in our Protx Direct payment module's documentation, however, as with all policies in life, it's up to yourselves to judge what to do about compliance.

As is mentioned in the documentation for this module, we take no responsibility for anyone's usage of the module.

What I will say here though is that at no point are the customer's card full details stored in your database by this module. Obviously a SSL certificate to secure your checkout is recommended as essential by us but again it is up to the individual shop owner to take responsibility for their decisions as to how they accept card details.

All the best...

Conor
ceon

[debugyeh]

Excellent Module, thanks very much, can some light be led on how to set up the blowfish encryption? Im new to this, thankyou

[Ryk]

I'm fairly sure this is something for your host

[roger@archiweb]

Hi,
I realy hope that someone can help me here as I'm in a bit of a hole.

I've installed the Ceon module on a clients site. The module worked well and the extra digits were being sent through to an email address.

I changed this email for testing purposes to a personal one of my own. Again all worked well.

Launch day came and I switch it back to the clients email. Now the digits aren't being sent. For some reason the will send them to any email on my personal domain, but not to any other email address on any other domain.

I've tryed re-installing the module but nothing seems to work. If anyone can shed some light it would be greatly appreciated.

Regards
Roger

[JOKESBYPOST]

Hi We have installed this module but it is not showing up on the payment page and we have enabled it.

Any ideas?

Regards

Adam

[monkeytastic]

In the Admin, change “Enable Debugging Output” to “True”.

I can't find this anywhere, please let me know.

[conor]

Hi,

In the Admin, change “Enable Debugging Output” to “True”.

I can't find this anywhere, please let me know.

When using payment modules in Zen Cart, each module has its own admin configuration, accessible via Modules > Payment.

Click on ceon_manual_card to see the configuration for the module, you'll find all options in there!

All the best...

Conor

[X-Bumble]

Hope someone can please help me.

I have Zen 1.3.8.

I downloaded Manual CC from CEON and installed it as per the instructions. All seemed to be fine and it showed up in the modules panel.

I downloaded Blowfish and did a manual install, but cannot understand where I am supposed to access it from in order to put in the key?

More worryingly is that the CEON module has the red dot next to it, meaning of course it is switched off. But if I click the module, or any other module now, no option box comes up letting me turn them on or off.

This problem did not occur until the CEON module was installed.

Could anyone please tell me how to enable the modules to be turned on or off, and where to enter the security key, should I need to in a manual install.

Many thanks for any help.