TOPIC: Off Line Credit Card Processing

I would like to ask for credit card info at the billing stage and process it through our Point of Sale System and not through authorize.net or other online processors.

I thought you could do it through the Pay Later feature, but where do i create the card holders name, credit card number, csv, and other fields.

I know i can create new fields in the admin section, but will it assign those fields to just the Pay Later Feature.

My plan is to edit the language file and rename the pay later label to somethign else.

Is this feature ever going to be standard?

thanks

The only way to do this presently is to create your own fields, but you can't assign fields to a payment gateway option. Are you offering other options? If you only offer Pay Later and only have one pay later option available, the payment selection screen will be skipped... so having your fields would work just fine. If you'll be offering other pay options... you could create some selection field pertaining to payment method and make your credit card fields show conditionally based on the selection in other fields.

We'll probably add an offline card processing option at some point.

It really is not a safe practice to collect credit card information on the form and save it unencrypted in the mysql database... or send it unencrypted via email.

What about emailing half the credit card info to the admin, which the other half of the credit card number would only be accessible through the admin protal. that way you would never email a full credit card.

another option is to use tokens. I love your product, but this just seems to be standard on other scripts such as virtuemart.

thanks...

As was already mentioned, don't do it.

If your processing credit cards I suspect you may be subject to PCI compliance standards. If you don't know ask your accountant and corporate lawyer. You would be placing your customers information at risk and you would likely be liable if something went wrong.

I understand PCI compliance, and yes, i definitley don't want to be liable if something does goes wrong, but an earlier post to this subject, DTHadmin said that an offline processing feature might come out in the future. Are you saying this will never happen. Just wanted to know.

thanks