Offline credit card module disallowed by some hosts?

1. is on a shared server (as most merchants probably are)
2. doesn't have or want to use a cc gateway (so you can manually screen your orders)
3. doesn't have or want to use paypal (could be many reasons).

Protx VSP Direct with moto (mail order telephone order).

Vger

There are many methods in addition to Protx. Most Gateways have a virtual terminal available with the online processing for taking mail order and telephone orders.

There are many methods in addition to Protx. Most Gateways have a virtual terminal available with the online processing for taking mail order and telephone orders.

Yes, but the original poster is UK based and as many people do not like to use Pay Pal that only leaves Protx Direct, SecPay, HSBC Secure ePayments and Barclays ePDQ as major players in the UK for this sort of thing (moto accounts and online processing). And ePDQ isn't too great even though it uses the same back-end software as Secure ePayments.

Admittedly Protx dropped the ball back in August when they upgraded their systems to be PCI compliant and 3D Secure enabled, but they are back on track now.

Vger

Vger

Do you allow your Zencart Customers to use the worldpay module on your hosting packages?

Many thanks

Sarah Walker

Yes, WorldPay stores the credit card information so that's not a problem.

Vger

thanks for the speedy reply!

Perhaps the easiest way would be a version that does not take the middle digits but instead places an asterix, you can then call the customer for the details.

_
What is the point then? if the customer entered the card number, wouldnt it be annoying to do that again on phone?
Email is absolutely not secure.

You can: force customers call to pay, but you will lose a number of customers.

cookiesa:

Perhaps the easiest way would be a version that does not take the middle digits but instead places an asterix, you can then call the customer for the details.

Or use mals

I know this an old post but I have been reading up about security following another post today, and this got me thinking... if a hacker did get access to the server then even using Paypal or Protx or ANY payment gateway at all is not secure because the hacker can write a script to send the user to a fake paypal account, or even better a "middle" process page which emails the details to them invisibly before forwarding to the gateway so no one will even know. I am not an expert on this, so dont know if its possible to prevent this happening, but if this is true then absolutely no payment process is safe if its hacked, so the only way is the server/system must be hack proof. If I am wrong then please correct me.
thanks

infocom:

I know this an old post but I have been reading up about security following another post today, and this got me thinking... if a hacker did get access to the server then even using Paypal or Protx or ANY payment gateway at all is not secure because the hacker can write a script to send the user to a fake paypal account, or even better a "middle" process page which emails the details to them invisibly before forwarding to the gateway so no one will even know. I am not an expert on this, so dont know if its possible to prevent this happening, but if this is true then absolutely no payment process is safe if its hacked, so the only way is the server/system must be hack proof. If I am wrong then please correct me.
thanks

Um ... so, is the point of your post just to say "don't get hacked" ?

Um ... so, is the point of your post just to say "don't get hacked" ?

No, the point of the post is that in another thread he is trying to justify storing card details on a shared server.

Vger

well, the posts imply that if you really want to be safe then use a gateway like protx or paypal. but then i thought if the site is hacked then even those aren't safe are they, because a hacker could intercept anything on the site before they go there. so i just wanted to say in doesnt matter if you use something like Ceon, or if you use paypal/protx/etc because if a hacker could get in they could get the details regardless.

if I'm wrong correct me, but thats how I see it so just wanted to confirm that. its because I am using ceon on some sites, and from what I say, believe it to be as safe as paypal, as long as a hacker does not get in.

in another thread he is trying to justify storing card details on a shared server.

well, yes and no. i dont agree in storing ALL data, I really dont want to, but to process them manually you have to have some storage method somewhere. I just want to make sure the method used is the most secure way of doing this in Zencart. My point is that I THINK using ceon would be just as secure as Paypal, IF getting the card data relies on someone hacking the site.

if you want completly secure un plug it and take cash through a little drawer through bullet proof glass,

as far as storing the numbers it just plain stupid and violates most cc company and merchant agreements,

so the short is

it dosnt matter how safe or unsae you think it is,
its up to the folks that allow you to take these CC....

and Visa Mc AMEX and Disc...

if you violate their tos and they jerk your abillity to use their cards then your out of luck.....

I think a much better place to ask these questions of yours is from your CC Merchant.

:clap::clap:

Well said.

Vger

Merlinpa1969:

if you want completly secure un plug it and take cash through a little drawer through bullet proof glass,

as far as storing the numbers it just plain stupid and violates most cc company and merchant agreements,

so the short is

it dosnt matter how safe or unsae you think it is,
its up to the folks that allow you to take these CC....

and Visa Mc AMEX and Disc...

if you violate their tos and they jerk your abillity to use their cards then your out of luck.....

I think a much better place to ask these questions of yours is from your CC Merchant.