Re: Upcoming X-Cart v 4.4.6 (now renamed to 4.5.0) & PCI-DSS requirements
 

Re: Upcoming X-Cart v 4.4.6 (now renamed to 4.5.0) & PCI-DSS requirements
 

Ok so here is a question for QT (or anyone who knows a good answer). X-Payments is a certified application right. But of course it does not include all possible payment gateways. If anyone is using a payment gateway not supported by X-Payments can this payment gateway be integrated by modifying existing or adding new files to X-Payments? I am sure it is possible but will this "break" the certification and make that copy of X-Payments non-certified? And force the user to fill out different SAQ? How something like this can be handled?

Re: Is it possible modifying existing or adding new files to X-Payments?
 

Moving to "X-Payments issues & questions" forum.

Re: Is it possible modifying existing or adding new files to X-Payments?
 

Thanks Alex, I didn't even remember there is a forum for X-Payments now. An answer?

Re: Is it possible modifying existing or adding new files to X-Payments?
 

> I am sure it is possible but will this "break" the certification and make that copy
> of X-Payments non-certified?

PA-DSS certification is granted to certain state of the software. If you change it there are several ways after that depending on size of change -
http://blog.halock.com/blog/security-sense/what-is-a-pa-dss-minor-change

Adding a new payment gateway integration to a PA-DSS certified software leads to re-assessment of the change by a PA-QSA. Usually such re-assessment costs a fee (may be measured in hundreds of USD or more), but it is much cheaper than re-assessment of entire software.

Re: Is it possible modifying existing or adding new files to X-Payments?
 

Thanks Alex. That's what I thought