Question on credit card processing

[ehansen]

Is there a way to allow credit card payments through a merchant but also not have Blesta save the credit card information? Going through the PCI compliance stuff is sort of a massacre.

[Marco]

I'm about to do the PCI as well. I used a free service just to see what would happen and I passed the scan.

I do know Blesta encrypts all the data, but I also use SSL. If the card wasn't stored, you couldn't do auto-debit.

I will be watching this thread with intrest (no pun).

Marc

[Paul]

v3 supports offsite storage for gateways that support it. For example, the authorize.net gateway in v3 supports both the AIM and CIM methods. The AIM method is what we use now in 2.x. The CIM method however stores the card data with authorize.net, so sensitive information is not stored in Blesta at all.

[ehansen]

Originally Posted by Paul

v3 supports offsite storage for gateways that support it. For example, the authorize.net gateway in v3 supports both the AIM and CIM methods. The AIM method is what we use now in 2.x. The CIM method however stores the card data with authorize.net, so sensitive information is not stored in Blesta at all.

Hah, thinking about this more made me realize how stupid the thought process I had was. Here's how I invisioned things:

1. People enter their CC info
2. Send that data to PayPal to process
3. Get money
4. Profit

All that without storing the CC info on the server. However, this is flawed and impossible to pull off in every conceivable way possible. Sorry about that, I was trying to think if it was possible to use a payment gateway instead of a merchant.

[peter1brown]

You have the ability to process credit card orders manually for phone or fax orders.Orders placed using the Manual Transactions link will not have a record of the transaction stored anywhere other than the batch file. Placing an order as a customer through your Store will give you a more detailed record of the transaction including an order number, customer information, and items associated with that order.

electronic credit card processing