Hi,

There is a problem with my stores not being PCI complaint, which is now being demanded by VISA/MC merchant carriers. I have a store, that the server is pulling to a server that will help make the store pci compliant...however, the problem is that this server can only contain a limited amount of space. Most of the products in this store are download items, that go over the amount of space. I need to be able to connect a script of some sort that will allow the downloads to be accessed from a different server, rather than the standard path? Is there any ideas for this? Also, any inquiries as to writing something will also consider your quote for hire.

thank you for your help and great support on this forum.
Kinget.

You might want to look into storing the download files in the mysql database if that has no limit.

Someone changed my title. lol...Thank you for your input on this, however there is a limit and the mysql will not work. We really need to make the "path" to the "downloads" an offsite location, rather than the normal location. Is this possible? If so, how can this be achieved or changed in the code?

If that doesn't work..how about making the cart itself PCI compliant rather than having to move to a server that is PCI compliant with grave limitations? This is going to be a big issue with Zen, as all CC companies are demanding PCI compliance.

Thanks always for your input.,

We really need to make the "path" to the "downloads" an offsite location, rather than the normal location.

NO zc uses the server path to get the download files.

If that doesn't work..how about making the cart itself PCI compliant rather than having to move to a server that is PCI compliant with grave limitations? This is going to be a big issue with Zen, as all CC companies are demanding PCI compliance.

This would be based on the gateway you are using. Some gateways do all the cc trans actions on the gateway servers so how would your server even know what was done other then a return value saying paid or failed.

Only can suggest that the download file contains a link and password to retrieve the real file from another location.

skipwater:

NO zc uses the server path to get the download files.
====

Is there a way to write a code so that zc can use a separate path to get the downloads?

=====

This would be based on the gateway you are using. Some gateways do all the cc trans actions on the gateway servers so how would your server even know what was done other then a return value saying paid or failed.

========
Perhaps you misunderstand what I mean by PCI compliance. This is a new requirement that all MC and Visa cards are requiring. They test your site location, not just the gateway. They said that my zen cart was not PCI Compliant.

However, with my hosting server the cart is listed on, it can be moved to another dedicated server that iwill make the store PCI compliant. The problem is that particular server only has a limited amount of space and it doesn't have enough space to store all the download files they sell on the cart. What they need is a way to be able to store the downloads on a different location that isn't as limited, which is why we were looking into seeing if there was a way to switch the path or write something where they could have the downloads accessed from another location, rather than the default.

PCI Compliance is going to be a security issue, as it's now being required by all merchants to comply. They put your site through a series of secured tests that you have to pass. If you fail, they will not allow you to use your gateway for MC or Visa.

Only can suggest that the download file contains a link and password to retrieve the real file from another location.[

That may be an idea, thanks...sounds complex for the customer though- I think someone would get irritated to click a download link to get an access to retreive their file - but it's something. Thanks for your help...really appreciate your insight.

Who is your host?

Cave Creek - -

kinget:

Is there a way to write a code so that zc can use a separate path to get the downloads?Only if you want to rewrite a significant portion of the guts of the download code.

kinget:

Perhaps you misunderstand what I mean by PCI compliance. This is a new requirement that all MC and Visa cards are requiring.It's not new. It's been around for awhile. You'll see many discussions elsewhere on the forum about the same topic.
You'll also see that several of the Certified Hosts are already PCI-compliant, even with their "shared" accounts.

kinget:

However, with my hosting server the cart is listed on, it can be moved to another dedicated server that iwill make the store PCI compliant.If you look carefully, you'll realize that if they can put you on a dedicated server and suddenly you're compliant, then the issue is clearly not related to the Zen Cart software, but rather is tied to the shared server where they had/have you.

kinget:

The problem is that particular server only has a limited amount of space and it doesn't have enough space to store all the download files they sell on the cart.Maybe you're with the wrong hosting company.

kinget:

What they need is a way to be able to store the downloads on a different location that isn't as limited, which is why we were looking into seeing if there was a way to switch the path or write something where they could have the downloads accessed from another location, rather than the default.As mentioned above, you can do it, but it'll be less expensive to move to a host that's already PCI-compliant than to hire someone to rewrite the code to work with the less-than-optimal makeshift approach offered by your hosting company.

Hi...

Thanks for this information. I will relay it to the others.
Kinget.