[joelrhome]

I just want to say that I have a lot of respect for the mod developers within the X-Cart community. These guys are smart, and care about customer service. My company has been working with X-Cart since 2003, and we do a LOT of specialized customization. Since then, I have seen a number of these Mod developeres show their expertise, but also care for their customers, and that should be commended.

To anyone who is concerned about PCI Compliance, it can be an overwhelming concern. Don't just shrug this off as a millennium bug, but please reach out to one of us in the X-Cart community for clarification, and assurance. We are here to help you.

I have a client that was improperly scoped for PCI before they became our client, and we discovered yesterday that they have been paying a monthly penalty since 2008 for non-compliance. This isn't a game, and the folks who handle cc processing are serious.

So far, I have only seen 5 solutions for X-Cart.

1. X-Payments
2. BCS Engineering's DPM Module
3. CRE Secure
4. Our modal box gateway.
5. A separate hosted payment page.

If you do any conversion analysis, you know that the numbers are staggering when it comes to Number 5, where you have to enter cc info after the checkout page on a different site after checkout. Let's face it, people are skittish, and anything that might cause the slightest suspicion in security can result in loss of sales.

My point is that everyone needs to think about their customers, and whatever method is both PCI Compliant, and gives your customers ease of use combined with peace of mind.. That should ultimately help your decision in what to do by July 01 2012. I like our method because the payment processor not only met our clients rates, but in most cases beat the rates they have been paying.. I think offering it for free is a good way to contribute to the solution. The only thing is, you would need to switch your payment processor.. After the switch though, you would pay the same or less than you are paying now.