View Single Post
  #153  
Old 02-28-2013, 08:52 PM
  cflsystems's Avatar 
cflsystems cflsystems is offline
 

Veteran
  
Join Date: Apr 2007
Posts: 14,201
 

Default Re: X-Cart 4.5.5 released

You have to be f**** kidding me... Pardon my French

Up to 4.5.4 Quantum Gateway hosted page and iframe are listed under payment gateways (not talking about the onsite one at all as it is part of XPayments connection). Both are PCI-DSS compliant and you can choose which one to use - although they work in a similar load-new-page way.

Playing with the 4.5.5 settings and everything - well guess what - QG iframe is nowhere to be found. The hosted page still exists. Why this matters - you can style the iframe page to match site but you cannot style the gateway hosted page.

Even more - the onsite QG transparent page is gone as well - not listed under XPayments gateways in XC

WHY THESE 2 GATEWAY PAGES WHERE TAKEN OUT? It is not because of compliance.

Am I correct to assume that the QG iframe exists in XPayments only and was taken out from the store so you can make XPayments iframe to integrate on checkout page, which from what I read here still doesn't work correctly? If that is the case this is complete bull....

Or is QG not supported by XC anymore? Which is just very strange since it does exist in 4.5.4

Please tell me I am wrong about this and I missed something somewhere.... Otherwise it looks like you just broke something that worked so you can try to code something else that still doesn't work....

On a separate security note - after this upgrade takes so much on security and a recent security patch released XC login and register forms still allow for autocomplete previous entries. This should be forbidden within the <form> tag, it is so simple, and it is like the first thing to do and yet this upgrade that emphasize on security improvements does not have it....
__________________
Steve Stoyanov
CFLSystems.com
Web Development