Card Holder Not Present - CNP Payments

[Guest]

Firstly I apologise, from searching I do realise this has been covered before BUT not recently.

 

My client ONLY accepts payments via the phone and requires CNP processing which they have done previously using another eComm system.

 

Their previous hosts have gone bust and therefore we are looking at using osC as the new system. Currently the orders are emailed directly to them with the card details being encrypted using an 128bit encryption key which is then used at their end to decrypt the whole email.

 

Does eComm support any system such as this.

 

I am hoping that someone, somewhere has already jumped throught these hoops and can provide me with a bit of help/knowledge.

 

Many thanks in advance for your help. As already stated I know that this has been covered but just wonder if anything has changed and also as you are all aware when a project such as this is thrown at you (and you are new to the product) there is a very steep learning curce and a lot to search through and absorb.

 

w2m

[♥Vger]

There is a default Credit Card module built into osCommerce which captures and verifies the credit card data against known algorithms, but this will need to be updated to take account of new credit card issue numbers (look in Contributions).

 

I don't know if it encrypts the data for sending via e-mail, but I doubt that it does. However, you do have the option of sending the card number split into two seperate e-mails.

 

The best solution would be to use a card processing company which offers both an osCommerce module (in Contributions) for online processing and also access to a virtual terminal to be able to manually enter card payment details provided over the phone or via mail.

 

In the UK that would be someone like HSBC e-Secure or Barclays' ePDQ, but outside of the UK I'm not sure who provides this dual facility.

 

Vger