Quote:
|
Originally Posted by zorg
Thank you all for your interest in X-Payments application. My name is Yury Zaytsev, I'm CTO at Qualiteam, though haven't been posting much to X-Cart forums previously.
Just to make it clear, X-Payments 1.0 will be released along with a mod for X-Cart 4.3.
Depending on your needs we'll also prepare guidelines and patches on using X-Payments with other X-Cart versions, LiteCommerce and other open source e-commerce software.
The important thing to note is that X-Payments is intended only for the minor part of merchants who want to go through the complete process of PCI-DSS certification. X-Payments, thanks to the PA-DSS compliance, will make it easier for the merchants.
The major part of online stores currently operating could be configured to actually become out of the scope of PCI-DSS certification (in this case a store should not store, process or transfer cardholder data). Guidelines on configuring X-Cart in this manner can be found at http://help.qtmsoft.com/index.php?title=X-Cart:User_manual_contents (see "Configuring X-Cart to meet PCI DSS").
Thank you for the cooperation, and feel free to contact me for further clarification. |
In mid-October 2009 the online roadmap from X-cart stated the payment module would be released January 2010. It now shows May 2010. Considering compliance is required a month later that should be more than a concern for v4.3 users, especially since the initial testing is still in planning stages.
The roadmap still states "the module that can be used by X-Cart 4.1/4.2 users with moderate customization of X-Cart source code."
What I read from the CTO is that the roadmap is no longer valid and he has updated the roadmap in this thread with other options, none of which seems viable to most users of these versions.
We have more than an "interest in X-Payments application" and as a CTO you owe more than a closing comment like "contact me for further clarification".
I am sure if you could provide a patch to support older versions you would, and to be clear, it sounds like it is beyond the ability of the team and the application, otherwise you provide it to avoid the concerns of your customers. My only complaint is Qualiteam should have been very clear about that from the beginning. Because you were not, there will be thousands of sites forced to scramble for a reasonable solution.