Shopping Cart question...

[victoria]

Question...
I don't currently do a lot of shopping cart set ups.. ok, I don't do any, unless it's Paypal, which is easy to set up. I have a client who has come to me asking if I can set up her shopping cart online.. she refuses to use PayPal, and wants to have her site set up so that customers can add items to the shopping cart online then go to a checkout screen where all the info will be entered along with CC info then she wants it all submitted via email so that she can process the credit card in-store. Can someone help me out here? Is there a safe way to do this?

[jestep]

What language are you programming in? If you are using php or asp, I find the best and easiest way it to use a session id for each customer. Associate the specific session id with a customer.

Then use a database with several tables:
shopper tracking
product database
product category*
product brad*
* these may or may not be needed depending on the complexity of your product database.

I wont go into too much detail, but basically you want to add products to the shopper tracking based on what products the visitor adds to the cart.

Adding to the cart will store the product information from the product database into the shopper tracking along with the customers unique session id. At the final checkout page, you query all of the items from the shopper tracking with the visitors session id and add the prices to get a total.

Here is a simple database setup example.
-------------------------------------------
Table: Products
product_id
product_name
product_price
product_shipping
product_shipping
product_image_sm
product_image_large
product_misc_1
product_misc_2
product_misc_3

Table: ShoppingTrack
customer_id
product_id
----------------------------------------------

[roban]

I use Cube Cart and the default gateway is called "Post" which sends an e-mail to the store owner with relevant order details. There are other gateways as well but "Post" is the default.

[roban]

I use Cube Cart as my cart and the default gateway does what you are suggesting. An e-mail is dispatched with relevant order info to the store owner. As long as you send this over a secure server you should be fine.

[ADAM Web Design]

As far as a "safe way to do this", I know that Mal's E-Commerce will do this. I'm not crazy about it since it's a potential liability issue, but I know that they haven't had any problems with it.

Basically, you create static product pages using HTML and then implement them with Mal's E-Com. I think they have a hosted solution as well where you can add the products right on their site.

[steve0]

"CC info ... submitted via email "

Baaaad.. email not encrypted.. "

[MattE]

I found this one just the other day when searching for a solution for a client.

Seems good, and not too expensive. Has all sorts of payment options.

<MOD EDIT: PLEASE DONT POST AFFILIATE LINKS>

[taxthis]

Submitting full CC info through email sounds like a disaster to me. What your client really wants is an electronic processor that ties into their merchant account.

Why have the customer enter all the information into a site, just to have it emailed and then entered again by the merchant at the store? Talk about duplicating efforts!

I use the ECI gateway on my stores, see signature. If I want to process a phone order I can do so through a secure website.

[cyanide]

Originally Posted by roban

I use Cube Cart as my cart and the default gateway does what you are suggesting. An e-mail is dispatched with relevant order info to the store owner. As long as you send this over a secure server you should be fine.

I hope that email does not contain cc info

victoria: email is not a secure way of retrieving credit card information. Your client should be using a proper merchant account/gateway .

[TheWebDoctor(tm)]

Victoria, what you need is a system that allows a shopper to add their information including cc and then informs the shopper and store owner of the sale.

The store owner should receive an email notifying them of the sale, yet not including the credit card information. The credit card information is then available online through a secure connection. Upon reviewing the order online the credit card numbers and expiration date is visible so they can be typed into the transaction terminal.

The CVV2 codes should not be stored as that is against the rules established by MasterCard, Visa, Discover and AMEX.

If I can be of assistance let me know.