Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeDNN Open Source...DNN Open Source...Module ForumsModule ForumsStoreStorePaying by credit card with option to not charge accountPaying by credit card with option to not charge account
Previous
 
Next
New Post
4/17/2008 9:37 AM
 

I have the store module incorporated into a site I'm working on.

My client wants to have not only PayPal but also a way for people to pay by credit card if they wish, but in a way that it does not charge their credit card until it is known that the product is available.

If the product is available my client wants to be able to make the charge on their credit card reader in their "brick-and-mortar" store. If the product is NOT available, she wants to have the option to not charge the credit card since the credit card company charges her for every credit card charge that is made.

She wants to be able to get the credit card number and decide herself whether or not she wants to charge it or not.

Is there a way to do this?

 
New Post
4/17/2008 4:24 PM
 

None of the existing payment gateways will allow you to store a credit card number.  But, as long as you and your client understand the security risks of doing this, there are a number of ways you could achieve it, though all will require you writing a new payment gateway to collect the card details.

My advice would be to write a completely new gateway, perhaps using the Authorize.NET gateway as a template.  In terms of storing the card details I would suggest:

1) Do not store the entire credit card number in one place (the database or otherwise), especially if the database is on a shared hosting environment.  Consider splitting it into two parts storing the first part in the DB and the second to be (optionally encrypted and) emailed to your store administrator.  If you really cannot split the card number then encryption is required as an absolute minimum.

2) This is a no brainer, but make sure your client is using SSL for the page hosting the credit card details collection form.

3) Beware of any data protection issues that might apply as well.  Some payment gateways require your systems to undergo audits for security before they will allow you to take payments in this way (this is the case with Protx for example).

 
New Post
4/17/2008 5:31 PM
 

What is the EmailProvider used for?

Does it have anything to do with something that I might want to do?

I mean I could do the programming, but I am getting paid a flat fee for doing the site and if it's going to take me a whole lot longer to implement it the way they want, I'd rather just say it isn't plausable.

 
New Post
4/18/2008 9:01 AM
 

Having just created a custom shopping interface for the company I work for I have to second the Idea of using Authorize.Net, however it is even better for what you would like then previously mentioned.

One of the payment processing methods is called "Authorization Only." What that does is send the request in and verify the funds are available. The merchant then has 30 days to send a follow-on request of the type "Prior Authorization and Capture." The transaction is not sent for settlement until this is done. I have not played with this method myself so I am unclear if the credit card number is required for the second half of the transaction or not, but I bet Authorize.Net support would have the answer for you. I would assume they do not need the credit card a second time as that would force merchants to store credit card information, but again - I do not know for sure. This method of processing is specifically identified in their API as for situations where a merchant needs to check stock availability or review orders before shipment of goods.

There is one person who is implementing this on a different platform than DNN and used C# to write a current implementation. The link to his site is http://www.developingfor.net/miscellaneous/authorizenet-c-code.html. I have actually written a DNN implementation for it in VB and will be posting my code examples for initial implementation (mirroring his but on the DNN platform) this weekend on my blog at http://www.myhrfamily.net. Sometime in the next couple weeks after that I'll be posting my expanded implementation as I have built based on his to be a fuller implementation.

That said, the built-in PayPal processor may have some kind of delayed Capture type of transaction available, and other credit card processing products may as well. I just do not have experience with them and cannot steer you in the right direction.

 
New Post
4/18/2008 9:29 AM
 

The email provider just stores the order information in the database, and then sends an order notification email to the store owner.  It does what you want (in the sense that it does not use paypal or any other payment gateway), but you'll need to expand the behaviour to collect the card details and store/distribute them accordingly.

 
Previous
 
Next
HomeHomeDNN Open Source...DNN Open Source...Module ForumsModule ForumsStoreStorePaying by credit card with option to not charge accountPaying by credit card with option to not charge account


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out