X-Payments 1.0 beta5 announcement
 

Dear Everyone,

We have released X-Payments 1.0 beta5 which is currently in the final stage of PA-DSS assessment by our Qualfied Security Assessor (QSA).

X-Payments is a web-based payment application, designed for merchants, who accept credit card payments, using background payment gateways and who require compliance with the PCI DSS v1.2 standard.

As soon as we done with the assessment the software will be renamed to X-Payments 1.0, but you can start using it right away.

As promised, all existing X-Cart and LiteCommerce merchants received an X-Payments license free of charge (check "My licenses" section in your HelpDesk accounts).


You can read about X-Payments licensing at -
http://help.qtmsoft.com/index.php?title=X-Payments:FAQ#Licensing

You can download X-Payments package in File area/X-Payments and File
area/X-Payments/Tools in your HelpDesk accounts).

X-Payments User Manual - http://help.qtmsoft.com/index.php?title=X-Payments:User_manual

Also, you are welcome to contact us with any questions.

Our best wishes,
Qualiteam

Re: X-Payments 1.0 beta4 announcement
 

There were patches mentioned previously for running x-cart 4.1 and php 5.3 - are there any 'official' patches?

Re: X-Payments 1.0 beta4 announcement
 

Ok lets see now
1. Installation - as with xcart you need to first create the database, xpayments won't do it for you; installation instructions say make sure "var/log" directory has writable permissions but the install script kept complaining about "var/" catalog (not sure which one is that) needing to be 511 and it didn't let me continue (even when I made the whole xpayments directory together with all files and subdirectories 777) until I changed the owner of xpayments directory together with all files and subdirectories to the web server owner. I don't like that.
2. After successful install the only way to login to the back end is to execute the url sent in an email; if for any reason you don't get that email (and the second one with the pins) forget about login in; you will have to install again and hope you get the emails. I don't like that. We all know how xcart emails often end up in spam or not delivered at all; let's hope xpayments is not like this
3. After initial login right of way navigate to the create pins page, create new pins and PRINT the table. I made the mistake of just looking at the numbers and then logged out. No way to login again without knowing the exact number the system asks for. No way to recover PIN, you can recover only password which is useless if you don;t know the pin. I don't like this. And because each pin can be used only once what happens if last one is used and no new pins are created and you log out? No way to login back in. Read this http://help.qtmsoft.com/index.php?title=X-Payments:User_manual#Managing_PIN-codes
4. Had no chance to do more testing as of right now I am locked out of xpayments. Will have to install it again and try the connector to xcart.

Can someone explain the whole fiasco with username-password-pin. What is the point of "forgot password" if you don't know the pin? There has to be a way for the admin to login if they forget password, pin, username. Or what is the point of password and pin used together?

Re: X-Payments 1.0 beta4 announcement
 

Hello Steve! there is a tool (pin.php) for re-generating pins when lost, please see http://help.qtmsoft.com/index.php?title=X-Payments:User_manual#Generating_PIN_codes_for_othe r_users

Re: X-Payments 1.0 beta4 announcement
 

Thanks for that Yury, I missed it somehow. But still not a very good solution. I can do that but a regular store owner has no idea what that means or how to do it. There must be a better way. Also manual says "When all but five PIN codes from the table have been used, a reminder is shown to the user to generate a new PIN codes table" - I don't think this is good enough. How many times we see remainders but we are in the middle of something else and leave the remiander for later. If this pin's feature is mandatory then users must be forced to generate new pins and the system should automatically email the new pins table to the email of the logged in user.

Re: X-Payments 1.0 beta4 announcement
 

Please refer to this post:
http://forum.x-cart.com/showthread.php?p=285270#post285270

Re: X-Payments 1.0 beta4 announcement
 

When is the deadline for PCI Compliant? Is it still July 1, 2010?

Re: X-Payments 1.0 beta4 announcement
 

Totally Agree - I would also like a clear explanation on these points... i.e. why webserver rights & why is a password & pin required (why is this software not just stand alone - I feel very uncomfortable with X-Cart or ANY 3rd party having login data for my payments module)???

Re: X-Payments 1.0 beta4 announcement
 

Looking at the readme file it states:
IMPORTANT: To use X-Payments 1.0-alpha you must have X-Cart 4.3.0 with X-PaymentsConnector add-on module installed.

Is there a different version for XC 4.1x ?

Re: X-Payments 1.0 beta4 announcement
 

Let's say XPayments is released this week (2 weeks left to July 1 right?)
Will XCart have the development staff to handle the flood of requests from merchants needing their site patched to work on PHP5.3, installing X-Payments, skinning the payment page?

Then all other site programs (support desk, etc) will need to be made to work with PHP5.3 if they don't already...

As the clock continues to tick, this looks more and more impossible given the deadline.

I know Qualiteam is saying we can start using XPayments now... yet when I opened a ticket requesting an installation they said they won't install it until its released.