[Javascript] Credit cards

[Rodney Myers]

Not ideal.

The form in which the card data is taken should itself be hosted on a
secure server.
This means that when the form data is transmitted to the card clearance
service the data will be encrypted. That is what you plan to do if I read
you aright.

Better yet use a PSP Payment Service provider who will allow you to send
less sensitive data such as name address, transaction details to a script
on their server which will then take the card stuff. You are then not
responsible for the security of that data. Also you then do not need a
secure server for your own scripts though you could use one of course.

You will be storing customer data. If you take card data on your site and
there is a security breach relating to a card then you will be held
responsible. If you never take the data then you cannot be.

ClickPay for example can do this (though NOT using their main script) Talk
to them.
http://www.clickpay.net/

You submit to : https://www.clickpay.net/cgi-bin/payment.cgi



(BTW I have written interfaces for my (javascript) shopping software to
about 15 PSPs on this basis so I have a little background here)

Rodney

Kelly wrote:

> Thanks for the replies.
> Now does this make sense.
>
> I get a host with  secure files,
> put up my own simple shopping cart.
> Put a check out form in secure files & get the best free
> cgi script any one knows about that will post to a secure
> file & email an Invoice copy to me & the customer.
>
> Thanks, Kelly
>
> At 10:38 AM 9/7/2001, you wrote:
> >Hi,
> >
> >I am very much a beginner. As a learning project I have
> >about put together a simple shopping cart for our sewing
> >shop with a lot of help from the nice people on this list.
> >I think I can deal with shoppers checking out to pay with
> >checks, money orders or PayPal. Now some more advice
> >and opinions would be appreciated. How to take credit cards ?
> >We have a merchant account and have been running cards manually
> >and want to keep it that way. I know that a secure host is necessary.
> >What is the best way to process credit card transactions ?
> >When I went looking on the web there are so many free & fee forms &
> >scripts I just got more confused.
> >
> >Thanks, Kelly
> >

--
Shop at ssistant Add-ons and Developer Workshops
http://www.aflyingstart.net/addons/

Enquiries regarding Shop at ssistant Classic training :
Call 01256 880770

Rodney Myers
Based in Oxford, England
Technical Director, Shop at ssistant eCommerce Solutions