E-Commerce question

gareth_w - May 23, 2008 - 10:49

Hi,

I have a very simple e-commerce question which I'm hoping that there is a very simple answer to.

My society sells membership on-line, and that is all - so we don't really need a store. We have a credit card machine ourselves, and just need a way that we can capture credit card information for off-line processing.

For alternatives : PayPal, Google checkout, etc, are all unsuitable for us to use. A payment gateway from a bank is also far too expensive for the small amounts we would use it for (the credit card machine is costly enough anyhow).

I've looked at Ubercart; and while potentially useful it is overkill for what we would need. I also can't seem to find a method of just storing a CC number for later processing (feel free to correct me if wrong)

I'm showing my naivety in this area now, but is there any way to do this using Drupal itself (with a custom content type) running under SSL, or would this not be secure enough (Can you secure just one part of the site).

Alternatively, any simple options that people could come up with be gratfully recieved!

Many thanks,
Gareth

You might want to check out

bwv - May 23, 2008 - 12:21

You might want to check out the tac_lite for content access control. You assign a user role to access a certain taxonomy. Unless a user has that role, he/she cannot see the content. ----------------------------------------------------------------------
http://www.bwv810.com/

I am a writer and researcher. In my spare time I build websites with Drupal.
Je peux communiquer en français. / Я могу общаться на русском языке.

You could save the

jobbesobbicobba - May 26, 2008 - 14:33

You could save the information in a password protected excel file and keep the file on a flash drive or something you keep in a lock box of file cabinet (to meet PCI requirements) and then when you are ready to charge the cards, use a gateway that has batch upload (you can just upload the transactions from excel)

>> I also can't seem to find

Oblivious - May 26, 2008 - 14:47

>> I also can't seem to find a method of just storing a CC number for later processing (feel free to correct me if wrong)

You shouldn't store credit card information unless you are reasonably certain you can secure that data from unauthorized access.

Three answers....

gareth_w - May 27, 2008 - 09:35

... but only one slightly on topic, and marginally helpful

I do admit to not knowing my way around security as well as I should, but writing to a DB table and behind a SSL connection - is that not counted as being "reasonably certain" of secure enough? - The CC data would only be stored on-line until a transaction was made.

I take it then that there is no solution to this simple issue - and that we're at the mercy of whatever the banks want to fleece us for.....

Thanks

Gareth

Keeping credit card info pretty serious business

joebd_man - May 27, 2008 - 16:14

You can get spanked really hard if you mess up storing credit card information, consequently many small companies don't do it at all. That's why the shopping carts and gateways like Authorize.net and Payflow work the way they do - the CC info is simply passed to the gateway and never stored by the shopping cart. You probably want to think this one through a little more...

I know....

gareth_w - May 28, 2008 - 13:29

....I'm trying to think it through right now, and it's scaring me more than a little.....

Merchant Account

imglobal - May 27, 2008 - 15:13

Typically, you could use ZenCart for offline credit card capture. The best would be to use ImGlobal Solutions - www.imglobalsolutions.com since they are fully integrated with OsCommerce and ZenCart. That way you don't need to manually enter those transactions by hand. ImGlobal Solutions can most likely beat your current merchant account banks rates since they have a meet or beat pricing guarantee. Good Luck.

 
 

Drupal is a registered trademark of Dries Buytaert.