Stop storing Credit Card Number in Database

Hello,

I haven't installed zen cart yet but am considering it. My first question is this:

Can zen cart pass the CC number to the gateway without saving it in the database at all? I realize that if there is an issue with the order, the number will have to be re-entered - probably as a new transaction - but I prefer not to have the liability of storing the number at all if I don't have to.

Thanks,

Hujef

Zen Cart does not store Credit Card numbers in the database when you use a live gateway.

Excellent. Thanks for your response.

So, the CC# is passed through the gateway, I get a yay or nay, and that's that, correct?

I don't have peoples CC#'s hanging around on my server or in my Db to get hacked, right?

That's a major concern for me, and I've avoided commerce for a long time because of it.

That's right.

The CC companies' PCI compliance rules would prevent you from storing that data, even if you wanted to, without a major expenditure on server security.

stevesh:

That's right.

The CC companies' PCI compliance rules would prevent you from storing that data, even if you wanted to, without a major expenditure on server security.

If CC companies prevent the storing of a cc#, how is amazon.com able to have a feature like 1-click purchase?

Can it be that they are storing cc#'s to the payment gateway?

Amazon made the major expenditure I mentioned to secure their servers to PCI standards. No one here can afford to do that.

I really appreciate the reply steve, thank you!

Would you know of some US payment gateways that are capable of storing credit card numbers and provided a successful verification will allow for automatic charges to one's credit card?

Sorry, I don't understand your question.

Are there companies that provide merchant accounts (payment gateway) that can store credit card numbers?

Such that you can access them to save your customers from having to enter their CC numbers? No.

We've used authorize.net for a few years now. They don't allow access to the card number but we can rebill a transaction for up to 60 days (I think it's 60 days, but don't quote me). This is useful when a customer re-orders or makes changes to an order, we can take care of those changes without have to get their card number from them.

I have a some similar question.
I use the PayPal Express and Pro Modules.
Orders display the first four and last four of the credit card number.
The middle eight are x'd out.
Since I can see the first four and last four in the order, I must assume that it is stored in the database.
Is that PCI compliant?
I know retailers X out the first 12 and print the last 4.
pjb

pjbonarrigo:

I have a some similar question.
I use the PayPal Express and Pro Modules.
Orders display the first four and last four of the credit card number.
The middle eight are x'd out.
Since I can see the first four and last four in the order, I must assume that it is stored in the database.
Is that PCI compliant?
I know retailers X out the first 12 and print the last 4.
pjb
Visa says it's compliant, last time I talked to them.