View Single Post
  #110  
Old 01-13-2010, 06:47 AM
 
geckoday geckoday is offline
 

X-Wizard
  
Join Date: Aug 2005
Posts: 1,073
 

Default Re: X-Cart and PCI-DSS / PA-DSS compliance

Quote:
Originally Posted by cflsystems
Hi Ralph, if you don't mind me asking this (also hope it is part of the thread scope): I use Quantum Gateway and they have this http://www.quantumgateway.com/developer.php (look at the Integration APIs/In Line Frame APIs), this is the documentation - http://www.quantumgateway.com/files/ILF_API.pdf. Is this what you are talking about? In your experience how customizable this is - will it look on the site as it is not part of the site (talking about position of elements, organization....)? I got a quote from QT for integration and just want to know if it's worth paying them to write the module.

This is similar to what I am doing but not the same. Instead of hosting the payment page on your server like I do with this solution Quantum hosts the payment page but it is loaded in an iframe on your checkout page. This can be done with most gateway hosted payment pages but Quantum has developed a specific API for doing it this way. They've added some better security over the typical hosted page and a session keep-alive to prevent timeouts during checkout. I don't have a Quantum account to play with to fully understand how integrated it can look but is sounds like it should end up pretty transparent. As long as the Quantum page can be stripped down to just the entry fields for the card information the iframe will look just like any other part of your page. I'd ask Quantum for a demo site or another customers site to look at before you pony up for it.

I find hosting the payment form on my server and posting to the gateway cleaner. The iframe approach adds some overhead and some people have an aversion to iframing things on a page.
__________________
Manuka Bay Company
X-Cart Version 4.0.19 [Linux]

UGG Boots and other fine sheepskin products
http://www.snowriver.com
Reply With Quote