Just a quick note, when I looked into it a few years ago, the terms of service for Square specifically prohibited "Card-not-Present" transactions. The manual entry system was just for cases where the magnetic stripe on the card could not be read. Of course they are unlikely to catch you if it is just a handful of transactions, but I'd guess that they would quickly get suspicious if there were lots of manually entered transactions from cardholders who live far from where the transaction took place. The issue with card-not-present transactions is that the fraud risk is higher, so the rates the credit card processor charges the merchant are higher if that capability is permitted. It is possible that Square has changed their rules since I looked into this. - Bruce _____ From: hidden-discuss-bounces at lists.hidden-tech.net [mailto:hidden-discuss-bounces at lists.hidden-tech.net] On Behalf Of sammyland at comcast.net Sent: Sunday, December 16, 2012 3:30 PM To: Hidden-discuss at lists.hidden-tech.net Cc: Rich Roth; email list Hidden-Tech Subject: Re: [Hidden-tech] Retail cart software recommendations Hi David, PCI compliance will become the killer of small mail order providers, but if your clients are going to play, they gotta pay , as they say. Luckily your client already has credit card authorization through their store, as it is almost impossible to sign up from scratch now because of money laundering fears. A great credit card processor is Authorize.net - very flexible and you can either use a terminal or manually enter the number and they notify the cardholder of the purchase, etc...they are great - we've been using them for years. Does this happen to be their processor? - look into features that they may not be aware of or using now. Don't know if Authorize.net is accepting new clients for processing at this time, but check them out. So, into the theoretical: to be secure, which we all want, requires either a sophisticated system ($$$ - but well worth it in the long term) or using PayPal (which seems the most logical for your situation - both they and their customers can always run the PayPal purchases through their credit cards). What about a card reader such as Square, or the Intuit card swipe system (GoPayment) both of which I believe allow for manual input as well (Rich mentioned the latter below) You want to avoid Google because they track everything, and do not use OsCommerce - BAD BAD BAD Good luck - how you been? Bob Heiss (TeaTrekker) _____ From: "Paul Stallman" <aliassolutions at gmail.com> To: "Rich Roth" <webmaster at hidden-tech.net> Cc: "email list Hidden-Tech" <Hidden-discuss at lists.hidden-tech.net> Sent: Friday, December 14, 2012 9:47:50 PM Subject: Re: [Hidden-tech] Retail cart software recommendations ** Be sure to fill out the survey/skills inventory in the member's area. ** If you did, we all thank you. I suggest volusion. Its a hosted cart and would allow them to basically do what they are doing but be pci compliant. By nature they have to be paying huge monthly fines for not being pci compliant now. I think they normally charge at least a 35 per month fee for that. Not even to get into wisp compliance which has crazy fines per violation. I have this would solve that because it is already compliant but let's you just authorize at checkout. I then you can adjust the totals before actually collecting on the card. The thing is you don't see the actual cc# which keeps it all compliant. On Dec 14, 2012 4:37 PM, "Rich Roth" <webmaster at hidden-tech.net> wrote: ** Be sure to fill out the survey/skills inventory in the member's area. ** If you did, we all thank you. Check out: http://intuitpayments.com/card-process We used it a number of years ago (under the name of ECHO) and it had a many options including what you described - we coded our own logic, so I don't know what shopping cart offerings they have. Rich/webmaster On 12/14/2012 10:33 AM, David Korpiewski wrote: > ** Be sure to fill out the survey/skills inventory in the member's area. > ** If you did, we all thank you. > > > Hi folks, > I have a client who runs a small retail shop in Amherst. They use > "busybee cart" for several years now for web sales and it allow them to > receive the credit card information in a file rather than auto paying it > so that they can make adjustments as needed and only run it once through > their register. Their hosting provider seems to be going out of > business and the busybee software people have disconnected numbers and > bouncing emails. > > Long story short, they need a new cart software that doesn't auto > process through the likes of paypal or visa directly, but instead will > queue in a secure file which they can later download or access to then > get the information and run it through their register. > > Can anyone recommend any cart software that easily integrates into a > site and might be able to do this? And please don't tell me this is > horribly insecure and potentially a violation of 201 CMR 17, because I > already know that, but "the customer is always right" :) > > David > > > > _______________________________________________ Hidden-discuss mailing list - home page: http://www.hidden-tech.net Hidden-discuss at lists.hidden-tech.net You are receiving this because you are on the Hidden-Tech Discussion list. If you would like to change your list preferences, Go to the Members page on the Hidden Tech Web site. http://www.hidden-tech.net/members _______________________________________________ Hidden-discuss mailing list - home page: http://www.hidden-tech.net Hidden-discuss at lists.hidden-tech.net You are receiving this because you are on the Hidden-Tech Discussion list. If you would like to change your list preferences, Go to the Members page on the Hidden Tech Web site. http://www.hidden-tech.net/members _____ No virus found in this message. Checked by AVG - www.avg.com Version: 2013.0.2805 / Virus Database: 2637/5964 - Release Date: 12/16/12 -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.hidden-tech.net/pipermail/hidden-discuss/attachments/20121217/28cea051/attachment.html