View Single Post
  #7  
Old 09-16-2015, 05:30 AM
  Ksenia's Avatar 
Ksenia Ksenia is offline
 

X-Cart team
  
Join Date: Apr 2013
Posts: 735
 

Default Re: eBay Integration for X-Cart 4

Quote:
Originally Posted by cflsystems
You cannot use PHP 5.3.x and lower anymore due to PCI compliance. These versions reached their EOL and are not supported.


Hi Steve,
probably I'm missing something, but eBay integration module does not process credit cards etc, so why are we speaking about PCI compliance?

Moreover, if X-Cart itself uses redirect-based payment methods ( when the payer is sent to a payment page hosted by the payment gateway), the store is our of scope of PCI compliance regulations too. It simply never touches the sensitive CC info at all.

If "merchant-hosted" payment methods are used, the proper way is to process them via X-Payments, that's an independent software, PA DSS certified one, it has higher system requirements (compared to X-Cart) due to PCI compliance indeed, and yes, it requires PHP 5.3 or higher, but it can be installed on a separate server, other than the one used to host X-Cart itself. So PHP 5.3+ rule is rather applied to X-Payments, not X-Cart, if we speak about PCI compliance.

You may have many other reasons to use PHP 5.3 and higher, security is the most important one, but I still do not quite understand why you speak about PCI compliance in the context of ebay Integration for X-Cart.
__________________
X-Cart team
Reply With Quote