Search:

Look for a payment gateway that supports tokenization. Tokens can be used for what you are describing. Goolge "tokenization payment gateway card on file". Good luck.

I maintain a site on the side that uses the Magento Community Edition. Feature wise, and with all the available free and paid add-ons, it probably rivals most carts -- both paid and free. Speed wise...

I don't think HTTP vs. HTTPS really matters for most pages and most users don't care until they get to a form. Heck, many users don't even care if form pages uses HTTPS or not -- but I'm not one of...

The rule of thumb that I go by is a business is worth 4-8 times the yearly net income minus any outstanding liability. Since you mentioned "earn". Assuming all your costs are already deducted from...

I would say yes but "legally" it depends on where the merchant resides. If the merchant is located in the US, Canada, most of Europe, and many other countries, it falls under various Personally...

Hmmm. That's a bummer. For me, that was always one of the biggest selling points for using jQuery: One library to support all the browsers I need to support. I guess 1.9 will be around a LONG time.

I have my doubts that the seals can increase sales but I do know as a shopper, if improperly implimented, they can definately decrease sales. I've been to a couple sites where one was simply a...

I look at real world experience first. If the candidate has little or no experience, then I'll look diplomas and certificates.

That is a route but a little extreme. Besides, most will still need SSL for non-payment related handling of personal information. I know I don't fill out forms requesting my personal information that...

I don't think SIM by itself insures compliance, but it appears there might be options that allow for the SAQ-A level of support I am talking about. I think their Direct Post Method (DPM) can be used...

Many banks and processors are taking the easy route and doing exactly what you are describing. The shopping cart must qualify for PCI SAQ-A, meaning that the card information must be sent directly to...

I'm searching through various marketing materials and tutorials and I'm having a difficult time determining whether or not Magento Community Edition can do the following:

1) Let's say a store has...

Be very careful and do a lot of research before you spend any development time or money. An important thing to remember is that you (your website) is where all the liability resided as far as the...

Encryption implies decrypt able data. Hashes are not decrypt able.

Think of a hash as the sum of your data: 1+8+3+7+1+5+3+2=30, 30 would be the hash. With just 30, it's impossible to know the...

Part of your problem might be how you are asking the question. SHA-1 is not an encryption algorithm; instead it's a hash. Hashes are not "decryptable" but they are very good for storing peoples...

Customer initiated emails is a different topic. The topic here was a merchant website that received CC data from the customer and forwarded this info to the merchant via email. For customer initiated...

You didn't get my point. The list the link points to is the PCI certified application list, not the certified gateway list. All canned applications that handle credit card data must be PCI certified....

In that case I would recommend rewriting the interface to use a hosted payment page or direct post to auth.net or any certified gateway (I know of a better one ;-) ).

I'm just wondering where you found these bad reviews? I find mostly good reviews except for the fact they are now owned by eBay. My limited experience with it is that it is very flexible and...

Another note since PCI was referenced. osCommerce is not on the list of PCI validated payment applications...

No problem. I did find a few issues that may or may not be contributing to the drop. I posted my finding publicly as opposed to PM thinking that others may have similar issues with their sites. I...

deepsand, you baffled me here. I usually agree with you but this is very bad advice. In my experience, most sites and carts that cannot or do not have the expertise to impliment a PCI compliant...

We've had good experiences with RightSignature.com but I'm not sure if they meet your client's requirement to keep the process within the "company's employee area." We have also researched...

There is a difference between account info and cart info. I agree, account info should not be stored in a cookie -- but cart info can. My preference is that cart info would stay in a cookie that...

Well, this is what bought this to my attention. For many of the keywords and phrases in the list we are ranked fairly high -- fist, maybe second page. BUT, when I searched on the phrase that included...