robertk1
01-17-2009, 01:40 AM
In the past we have used formmail scripts for clients wishing to sell 1 or 2 items. We ran both the order page and formmail.pl securely and insisted the client use webmail securely to retrieve and print orders to keep credit card information confidential.
It was a good plan at the time, however I am wondering if anyone knows of a script to sell 1 or 2 items only. I'd like to avoid PayPal buyme buttons if possible.
Any ideas are appreciated! Thanks ....
protecweb
01-17-2009, 01:47 AM
Your previous system was highly risky and would have you cut off by any bank or card processor if they knew you where doing it like that i'm sure.
As for the clients knowing you where emailing their card details, well put it this way, i'm sure they would not be too pleased.
Why not use Paypal if your only dealing with a few transactions? It seems like the obvious option to me.
robertk1
01-17-2009, 02:13 AM
I thought it would not be a secure method as well, until we took it apart. The script was run securely, the email was on the server the script was on, so it never left the server and went over the internet. Every step of the way it was maintained over a secured link.
The email was created securely, interfacing via a 128bit SSL cert and stored on the same server it was created on, again it never went out over the internet. The connection to retrieve the data was also made using 128 bit encryption.
Back to topic:
We are looking for something better to offer clients, however, PayPal buttons are our least favorite choice for this customer.
Any ideas?
protecweb
01-17-2009, 02:23 AM
Card details where still stored in plain text on your server. They should be encrypted, any card company will have rules on that.
What your looking for is any kind of online merhant payment processor really. Put the technology in their hands as they have the technology to do it correctly.
Or at least encrypt your card details into a secure local database, before you retrieve them over SSL and process them manually.
robertk1
01-17-2009, 04:06 AM
I agree with you on your points. We have numerous carts (mostly oscommerce), and set them all up to process credit cards at the merchant processor level. Our clients don't store credit cards, and that does relieve a lot of issues.
Just this one customer we inherited that is stuck on his 2 item order page. I searched around and can't seem to find anything that will work for a small number of products.
While a poor choice, I guess PayPal is the best we have to work with for him.
Thanks!