Follow us on Twitter X-Cart on Facebook Wiki
Shopping cart software Solutions for online shops and malls

Do we need X-Payments?
 
Reply
   X-Cart forums > X-Payments > X-Payments issues & questions
 
Thread Tools
  #41  
Old 01-09-2013, 10:01 AM
  cflsystems's Avatar 
cflsystems cflsystems is offline
 

Veteran
  
Join Date: Apr 2007
Posts: 13,533
 

Default Re: Do we need X-Payments?

Quote:
Originally Posted by indizine
.....

I am in no position to tell the client what to do, only inform him which I have done, as already stated above.

.......

There is no risk of him pointing any finger of blame at me, that is for sure. All clients get warned of what they should or should not do.

That is the way to go yes. Of course you cannot make them do something or not - I meant be firm and make sure they do understand the consequences of not following the rules. This is not a game unfortunatelly and the banks will do anything to get their hands on someone elses money. And from what I hear bank fees will go up in 2013.... so maybe there will be revised PCI-DSS fees as well....

There are few good threads here in the forum about this as well as a webinar link - you may point that to them as a reading material
__________________
Steve Stoyanov
CFLSystems.com
Web Development
Reply With Quote
  #42  
Old 01-09-2013, 10:16 AM
 
indizine indizine is offline
 

Member
  
Join Date: Aug 2010
Posts: 24
 

Default Re: Do we need X-Payments?

Yes I will tell him to research this - like I say it's only because "PayPal said" and of course why would anyone phone PayPal to get their website approved for PayPal Pro and then disbelieve them? Bizarre but seemingly, true!
__________________
X-Cart 4.5.4
Reply With Quote
  #43  
Old 01-10-2013, 02:04 AM
  ambal's Avatar 
ambal ambal is offline
 

X-Cart team
  
Join Date: Sep 2002
Posts: 4,102
 

Default Re: Do we need X-Payments?

Hi Everyone,

We will work with PayPal to make sure their account managers have right understanding of X-Cart product line vs PCI compliance requirements.

indizine, I advise to have that client sign some paper where he will confirm that he was informed about consequences of using old X-Cart versions with non-compliant integrations. At least you will have some protection if he is fined after all.

Recently an Australian merchant using old version of X-Cart was fined by his bank due to big leak of credit card details and forced to change payment method. I fear I can't disclose more details due to privacy policy.
__________________
Sincerely yours,
Alex Mulin
VP of business development for X-Cart
X-Payments project manager
Reply With Quote

The following user thanks ambal for this useful post:
totaltec (01-10-2013)
  #44  
Old 01-22-2013, 10:36 AM
 
Donster Donster is offline
 

Senior Member
  
Join Date: Aug 2008
Posts: 106
 

Default Re: Do we need X-Payments?

I am using 4.1.10, with PayPal Pro Express Checkout and Authorize.net Aim and not saving CC information.

I am assuming I do not need X-Payments, correct?
__________________
X-Cart Gold v4.1.10
Reply With Quote
  #45  
Old 01-22-2013, 10:56 PM
  ambal's Avatar 
ambal ambal is offline
 

X-Cart team
  
Join Date: Sep 2002
Posts: 4,102
 

Default Re: Do we need X-Payments?

Donster, since you use Authorize.net Aim you do need X-Payments.
__________________
Sincerely yours,
Alex Mulin
VP of business development for X-Cart
X-Payments project manager
Reply With Quote
  #46  
Old 01-23-2013, 07:19 AM
  BCSE's Avatar 
BCSE BCSE is online now
 

X-Man
  
Join Date: Apr 2003
Location: Ohio - bcsengineering.com
Posts: 2,885
 

Default Re: Do we need X-Payments?

Quote:
Originally Posted by Donster
I am using 4.1.10, with PayPal Pro Express Checkout and Authorize.net Aim and not saving CC information.

I am assuming I do not need X-Payments, correct?

You need either X-payments or many banks (all that I know of) accept one of these two options as well to get X-cart out of PCI compliance scope:
http://www.bcsengineering.com/store/authorize.net-dpm-module-for-x-cart-pa-dss-compliant.html

http://www.bcsengineering.com/store/authorize.net-cim-module.html

It is really up to your bank and their requirements but having 4.1.x and having the CC going through your system is not OK without some major overhaul and audit of your system (or one of the above 3 options).

Thanks,

Carrie
__________________
Custom Development, Custom Coding and Pre-built modules for X-cart since 2002!

We support X-cart versions 3.x through 5.x!

Home of the famous Authorize.net DPM & CIM Modules, Reward Points Module, Point of Sale module, Speed Booster modules and more!


Over 200 X-cart Mods available & Thousands of Customizations Since 2002 - bcsengineering.com

Please E-Mail us for questions/support!
Reply With Quote

The following user thanks BCSE for this useful post:
totaltec (01-25-2013)
  #47  
Old 01-29-2013, 10:30 AM
  fmoses's Avatar 
fmoses fmoses is offline
Banned
 

Senior Member
  
Join Date: Apr 2008
Posts: 155
 

Default Re: Do we need X-Payments?

Hi,
I'm having trouble understanding how the x-payments product works. I understand that it will meet PCI-DSS compliance along with the scans, and to keep the CC information secure.

As the product itself is it a once install and done product or do I need to pay monthly or yearly fees for it?

I have an older version of x-cart, just because it is extremely heavily modded and I just couldn't keep up with updates, but will probably move up to 4.5 branch later this year or next.

I got an e-mail that the licenses in the account will expire soon, and am contemplating installing x-payments now if there will be a cost savings.

Can it be implemented in a 4.1.9 site?

Are there significant issues still with x-payments that I should be aware of before switching over?

If so what are the alternatives that can be done that will still preserve the onsite checkout appearance. I currently use PayPal Pro.

I apologize I've been avoiding this like the plague just because I didn't understand everything that is going on and how to properly integrate this into my site. Any advice, comments or knowledge would be appreciated. Thank you.
Reply With Quote
  #48  
Old 01-30-2013, 01:39 AM
  ambal's Avatar 
ambal ambal is offline
 

X-Cart team
  
Join Date: Sep 2002
Posts: 4,102
 

Default Re: Do we need X-Payments?

Quote:
Originally Posted by fmoses
Hi,
I'm having trouble understanding how the x-payments product works. I understand that it will meet PCI-DSS compliance along with the scans, and to keep the CC information secure.

Basically, yes. But in order to be fully compliant you need to run X-Payments in a separate PCI-DSS compliant hosting space. You can't have it installed in the same space where you run your online shop and other web-site software.


Quote:
Originally Posted by fmoses
As the product itself is it a once install and done product or do I need to pay monthly or yearly fees for it?

See http://www.x-cart.com/xpayments-pricing.html

There are two types of X-Payments - X-Payments Hosted ("For Small Business" and "For Malls" plans) and X-Payments download license.

The 1st type of X-Payments is a subscription based product since it is a hosted version - we provide PCI compliant hosting along with X-Payments so you do not need to worry about that.

The 2nd one costs rather large one time fee for life time usage, but you get the software with all the source code files and can host wherever you want provided your hosting space for X-Payments meet the aforementioned requirement (to be separate and PCI compliant).

Quote:
Originally Posted by fmoses
I have an older version of x-cart, just because it is extremely heavily modded and I just couldn't keep up with updates, but will probably move up to 4.5 branch later this year or next.

Well, you can keep using your old X-Cart version (4.1.x) and have it integrated with X-Payments. We provide connector module for your X-Cart version free of charge and you can download it in your File Area account and install. If you wish we can do the service of connecting your X-Cart with X-Payments for a fee. Contact us using http://www.x-cart.com/contact-us.html whenever you want.

Quote:
Originally Posted by fmoses
I got an e-mail that the licenses in the account will expire soon, and am contemplating installing x-payments now if there will be a cost savings.

This means you might have a free X-Payments license in your HelpDesk account since you received that email. Check "Licenses" section at https://secure.qtmsoft.com for a free X-Payments license. It will be annulled if you do not use your free X-Payments license before March 1st 2013.

Also, check this thread - http://forum.x-cart.com/showthread.php?t=65370 as there are some FAQs answered.

Quote:
Originally Posted by fmoses
Can it be implemented in a 4.1.9 site?

Yes, see above.


Quote:
Originally Posted by fmoses
Are there significant issues still with x-payments that I should be aware of before switching over?

The major one was with iFrame integration but we are going to fix it by providing a new X-Cart version and new X-Payments version with improved iFrame integration.
All others are caused by improper installation of X-Payments or/and using incompatible hosting space.
__________________
Sincerely yours,
Alex Mulin
VP of business development for X-Cart
X-Payments project manager
Reply With Quote

The following user thanks ambal for this useful post:
fmoses (01-30-2013)
  #49  
Old 01-31-2013, 09:53 PM
  fmoses's Avatar 
fmoses fmoses is offline
Banned
 

Senior Member
  
Join Date: Apr 2008
Posts: 155
 

Default Re: Do we need X-Payments?

Does anyone know of a decent compliant host to install x-payments on. I didn't realize the following that the hosting company said I needed to install x-payments.

x-payments will need to be setup on its OWN cpanel account using a subdomain, and it needs its OWN SSL certificate.

I was thinking if this was true, I was just going to host the x-payments subdomain on a hostmonster or comparable server. Getting another hosting account with my current vendor just seemed like overkill for this at this time. Any thoughts as to what a relatively inexpensive hosting setup would be including ssl, and dedicated IP to accomplish this? One of my goals is to install it for now to take advantage of the free license until i get it running for now. In the eventuality that I would go and integrate it would there be an issue to continue running it through there?

Another option was with GoDaddy they got a deal for premium hosting with a free ssl cert.
LINK
Reply With Quote
  #50  
Old 02-01-2013, 12:36 AM
  cflsystems's Avatar 
cflsystems cflsystems is offline
 

Veteran
  
Join Date: Apr 2007
Posts: 13,533
 

Default Re: Do we need X-Payments?

Check XC recommended hosts in the marketplace area. I woudl avoid GoDaddy for something like this - that hosting sounds like shared hosting.
__________________
Steve Stoyanov
CFLSystems.com
Web Development
Reply With Quote

The following 2 users thank cflsystems for this useful post:
ambal (02-01-2013), fmoses (02-01-2013)
Reply
   X-Cart forums > X-Payments > X-Payments issues & questions


Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT -8. The time now is 03:22 PM.

   

 
X-Cart forums © 2001-2018