[JWait]

My bad. I read 4.3 was due to be released in August and didn't realize that was the beta version and it was 2009 and not 2010. V4.3 is (according to what I have read here in the forum) supposed to be the first version that has the PCI-DSS / PA-DSS compliant payment module, with a patch for earlier versions coming later (how much later I don't know). The module (from what I understand) will be encrypted, so it can not be "hacked" to get it to work in any way other than how it is designed to work. I understand, and agree that this is probably the best way to go. I just hope there is some alternative for those of us that do not plan on using x-cart to complete that transaction, but only to get the authorization on the card and do the capture of the funds elsewhere.