Credit Card - Offline Processing

[Goshawk]

I am installing v139h and have noticed that this version does not have the "Credit Card - Offline Processing" payment module included.

I have looked through the "Add On's" but all I can find is the module that processes credit cards over the phone.

Can I transfer the files from an older ZenCart to work in this version?
And if yes, which DB tables do I need to import to make it work correctly?

Many thanks,

Goshawk

[DrByte]

There has been no "Credit Card - Offline Processing" module since v1.3.9a, released in April 2010.

You DO NOT want to be collecting credit cards to email numbers to storeowners for processing. EMAIL IS NOT ACCEPTABLE FOR CREDIT CARD DETAILS.

Be sure to tell your merchant account provider that you're planning to email credit card numbers. They'll be sure to shut you down in 5 minutes.
And if they don't, then they'll still be charging you higher per-transaction rates because you're processing cards manually instead of in real-time by a proper gateway which handles things WAY MORE SECURELY.



If you absolutely must ignore this advice, and if your server can handle all the advanced requirements for encryption offered by the Manual Card addon, try that. STILL, BE SURE TO INFORM YOUR MERCHANT ACCOUNT PROVIDER, since they MUST know what you're doing, lest you be caught in violation of their Terms of Engagement.

This is no place to get cheap about. A proper gateway is a wise investment.

[Goshawk]

DrByte,

Thank you for that advise and your quick reply.
I will contact 3rd party for processing.

Goshawk

[blbaron]

Actually, that leads to a question I was going to bring up... in the old manual system the CC number was split- the 1st and last set of 4 digits were stored and the middle 8 digits emailed, so the complete set was never stored until processed. The email was not insecure- it only had the middle 8 digits. We are in the hospitality business, and our on-line reservation management system went to that system in order to reach PCI compliance!
For those of us with small, low volume stores the manual system seemed to make perfect sense.

[DrByte]

With respect to whoever told you that, at the very best their advice is outdated.

Email is not secure. And will fail PCI inspection.

The only potential workaround for that is to encrypt the communications so that you have to decrypt the email after you receive it. There's an addon for using that approach. But the consquences of doing manual card processing don't go away: higher fees, higher risk, and must still notify your merchant provider of the approach you're taking and the increased risk of fraud that it subjects you to. If you get caught, or worse if someone steals card numbers because you've used insecure methods on your site, the fines you face will put you out of business.

I'm painfully aware that zillions of merchants hate the PCI rules because security carries increased costs and inconvenience. That doesn't legitimize ANY attempts to bypass the requirements and safe practices with respect to security.

The fact exists that PCI applies to everyone ... even those who think it doesn't just because they live in some particular geographic region. There's no good reason to ignore it or trick it. Cutting corners in the area of security and fraud prevention is just plain dumb. End of discussion.

[Merlinpa1969]

Im in agreement here,
WE are actually tossing oround the idea that Vger uses and not even allow the module to be used on the servers