SSL Credit Card collection & SSL for admin

[timvise]

The Credit card module that comes with osCommerce seems to not support SSL. Is there a way to enable ssl or do I have to find another module. When I looked through the payment modules I couldn't seem to find one that fit the bill.

 

Also I need to enable ssl on the administration for my clients to retrieve the credit card information.

 

My client wants to recieve the order online, then get the cc info and run the card on his equipment in store due to lower merchant fees.

 

Thanks in advance.

Tim Vise

[AlanR]

The Credit card module that comes with osCommerce seems to not support SSL. Is there a way to enable ssl or do I have to find another module. When I looked through the payment modules I couldn't seem to find one that fit the bill.

 

Also I need to enable ssl on the administration for my clients to retrieve the credit card information.

Sure it does. I use it all the time.

 

Enable ssl in admin then.

[timvise]

I have spent an hour looking for ssl option in admin. Can you tell me where in the admin menu?

 

Thanks

Tim

[AlanR]

Force it. ie:

 

define('HTTP_CATALOG_SERVER', 'https://www.yoursite.com');

 

in the admin config file.

 

There's already hundreds of threads here on securing admin. Do a search.

[AlanR]

I should also add that while I use the standard cc module and run charges offline I don't bother to run admin in ssl.

 

It's only an encripted link. What are the odds that someone is going to snatch an incomplete cc number in transit?

 

I send the other digits to a secure mail account on a totally unrelated server.