How do I set up credit cards??

[PRedmond]

Hi guys,
I have been searching for a simple guide on how the credit card systems work, but I haven't had much luck.
I am setting up a zen cart for a local store, which currently has an offline c/c processing facility. I had intended to collect the credit card numbers, and run them through the current system. I now understand that this may breach their contract, so it is something I will have to double check.
The main thing I do not understand is how SSL functions, and how you go about securely getting the cc numbers out of zen cart without potential breaches of security. I don't understand what happens once you buy a secure SSL certificate, and how that alters the way zen cart works!!!
Could someone clear this up for me?? I am not certain if there is a tutorial on this somewhere, but I sure couldn't find it anywhere!!!!

[kuroi]

You're asking about two separate things here. The SSL certificate is used to encrypt information sent between the users browser and the server hosting the Zen Cart. This would include credit card information, but also other info such as the personal details entered when creating and account and login info such as password.

There are several ways of enabling SSL certs, which are normally installed by your web host. Zen Cart plays nicely, but slightly differently with them depending upon the type of cert and how you host installs it. The Zen Cart end is described here in the FAQ.

Zen Cart has a built in credit card module which is ideal for off-line authorization. It can be set up by going to Admin > Modules > Payment. It works by taking the credit card details from the customer and storing 8 of the credit card details in the database and emailing the other 8 digits to the store owner. This deals with the very stringent regulations around storing the numbers in the database and the risk to card holders if the database is compromised. It's quite possibly these regulations to which you are referring in your original question.

[PRedmond]

Thanks Kuroi. I was pretty sure that was the case - just needed someone to confirm it for me!

Cheers.