X-Cart forums

[starwest]

I'm really starting to think that integrating a gateway that offers tokenization (such as Shift4) is a much better idea than relying on X-Payments and v4.x to get things right. Are any of you currently using a gateway that supports tokenization as a means to be PCI-compliant?

[xplorer]

Hi!

X-Payments design

1. There are many X-Cart 4.x users (wanting the payment form to be hosted on their server) who can't spend a lot of money and time in order to upgrade their stores to a new X-Cart version
2. We can't get all their X-Cart versions listed as PA-DSS verified payment applications

That's why we will release X-Payments. It is a compromise solution that enables the merchants to get their existing X-Cart 4.x stores PCI compliant with minimal efforts.

P.S. A note for those who didn't read earlier posts: if you completely outsource payment functions to your payment gateway, there is no need for you to use X-Payments. Just make sure that credit card functions are disabled in your X-Cart store

X-Payments+AIM vs. SIM

With Authorize.Net SIM you can't host the payment form on your server/domain. With X-Payments+Authorize.Net AIM you can do this. If you don't need this feature, you don't need X-Payments and may use Authorize.Net SIM.

The same applies to other payment gateways that offer two methods of integration.

Display the payment form on an X-Cart checkout page

Perhaps future X-Payment versions will support this feature when connected to future X-Cart versions.

Website Payments Pro and PCI compliance

A couple of months ago we had received two different replies from PayPal staff: "PayPal does not yet require PCI compliance; you can not worry about PCI compliance yet" and "While the card associations do not require that shopping carts demonstrate compliance, PCI compliance is a requirement for your end customers".

So, we have decided to integrate X-Payments with Website Payments Pro and to leave integration with the API in X-Cart 4.3 (previous X-Cart versions are integrated either). Without X-Payments an X-Cart store will process PayPal Pro payments in a non-compliant way (please consult with PayPal staff whether they allow this, or not). If X-Payments is connected to an X-Cart store it replaces the built-in integration and processes PayPal Pro payments in a compliant way.

--------------------------------------------------------------------------------------------

Since discussion gone away from the topic, I'm closing this thread.
Please post your thoughts on X-Payments in a thread related to X-Payments development.

Thanks!