approval authorize billing cart checked checkout clicks confusion correct credit data developer form full gateway google-checkout greetings handle including information lead merchants net payment paypal present process processes request server service shipping shopping solution standard store suggestion thank-you third-party transmitted updates

Is e-junkie shopping cart compliant with the new PCI requirements?

"The Payment Card Industry Data Security Standard (PCI DSS) applies to every organization that processes credit or debit card information, including merchants and third-party service providers that store, process or transmit credit card/debit card data.

If you are one of the above, PCI Compliance is not a request, or suggestion, it is now a requirement...."

Please see http://www.pcicomplianceguide.org/step2a.html for full article.

Thank you.

Greetings SoundMaven,

At the present moment, we do not store, process, or transmit credit or debit card information. However, PayPal and Google Checkout do.

What?? Once someone clicks to checkout on your e-junkie cart, your form collects the billing and shipping information, correct? https://www.e-junkie.com/ecom/cc.php and http://www.e-junkie.com/ej/faq.process.php

Doesn't e-junkie then transmit that billing inforamtion information to our gateway for real-time credit card approval (to http://www.e-junkie.com/ej/authorize.net-shopping-cart.php)? If not, how is the data being transmitted? Why, then, do you have the GeoTrust SSL if you don't transmit credit card data?

/me whipes egg off of face

Just checked with our lead developer (Robin) and it turns out that our server does handle that information for Paypal Pro and Authorize.net. In essence, I will pass this on to him and he will respond to this. Apologies for the confusion.

Okay, thanks.

Have there been any updates on this topic? I'm looking for a solution exactly like this except it must be PCI compliant.

Yes we are ..

.. and ControlScan just verified that :-)