Charge a CC after Order Editing

[drewcur]

Hi all,

 

A USA based client that I work for is having me mod his OSC site to have certain features. Currently, I've implemented an Order Editing mod I found in the contributions section (http://www.oscommerce.com/community/contributions,1435). It allows for full order editing, changing items of the orders, quantity, the whole bit (it's quite nice too, props).

 

He states that he commonly has stock outages and will call customers to make additions, subtractions, etc. So, what my customer wants now is a way to wait to charge a clients CC until after he's changed the order status to Delivered. I don't think he's decided on a payment module just yet, but I'm confident that he will go with Auth.net.

 

I've read that Auth.net has a pre-auth feature. I am painfully unfamiliar with really in-depth workings of Auth.net (I'm a college intern and only been working on OSC for a month or two :lol: ), but from what I've read is that it will do a pre-auth and I need to capture and hold the trans_id (or a return field like that) and when the order is ready to process, then throw that ID back at Auth.net for the go-ahead. Which brings me to my questions:

 

1) If I do capture a pre-auth ID number from Auth.net to process later on manually, will I have to pre-auth again for a changed order total or will I be able to pass the trans ID, the cc info, and the order total?

 

OR

 

2) Since Auth.net does not store CC info, should I just use cc.php for an initial checkout, find a method to encrypt the cc #, then pass it to Auth.net after modifications are made?

 

OR

 

3) A better suggestion from the public that will allow checkout to complete, store encrypted CC info, make potential order modifications and charge after my client changes the order status to Delivered?

[drewcur]

bump.

 

this should be a fun challenge for you experts, help me out :thumbsup:

[♥toyicebear]

To store cc info is not advisable, check the PCI regulations and you will see why....

 

You can set authorize to pre-aut the charge, then when you are read to "activate" the charge you can do so by login into the authrize.net controlpanel.