Accepting Credit Card payments wtihout the middleman?

[Guest]

Hi

 

We are just near the end of tailoring Oscommerce for the first time but have a query regarding credit card payments.

 

The people that we are tailoring the system for want to have the customers credit card details stored so that they can retrieve them and put the payment through via their instore facilities/till rather than paying Worldpay or Paypal (or anyone else) for the service.

 

The only way we can think of doing this is by securing the site using SSL and having Oscommerce send the credit card details to the database to be retrieved when required.

 

With their previous e-commerce site this is the way they operated things but I have serious doubts about the security measures implemented with their previous system so am not even sure if what they want to do breaks any laws/regulations here in the UK.

 

If I have posted in the wrong forum I apologise its late and i'm tired and in dire need of advice as to if Oscommerce can do this and if its going to break any laws/regulations!

[Autographs]

The Credit Card Selection in Modules/Payments Will Already Store Cards OR you can have the card numbers split and half mailed to you. At Least in my ms2.2 version it does

 

Just be sure to have a nice little secure admin area and you should be ok

[♥toyicebear]

Hi

 

We are just near the end of tailoring Oscommerce for the first time but have a query regarding credit card payments.

 

The people that we are tailoring the system for want to have the customers credit card details stored so that they can retrieve them and put the payment through via their instore facilities/till rather than paying Worldpay or Paypal (or anyone else) for the service.

 

The only way we can think of doing this is by securing the site using SSL and having Oscommerce send the credit card details to the database to be retrieved when required.

 

With their previous e-commerce site this is the way they operated things but I have serious doubts about the security measures implemented with their previous system so am not even sure if what they want to do breaks any laws/regulations here in the UK.

 

If I have posted in the wrong forum I apologise its late and i'm tired and in dire need of advice as to if Oscommerce can do this and if its going to break any laws/regulations!

 

oscommerce can do this by default, using the bulidt inn cc module, but yes they would in all probability be violating their TOS and risk losing their merchant account +++++

[dynamoeffects]

You can store CC#'s as long as they're encrypted, but that's it. Storing CCV numbers will get your merchant account yanked, and if you're ever hacked, the license agreement that was signed for VISA and MC say that they can fine you $500,000 for every lost number.

 

As I tell all clients who want to store the credit card number: They either need to expect to spend thousands of dollars a year keeping their server secure, or don't do it at all. The risks are too great to do it half-assedly.