Where (and when) Ubercart stores CC data? - drupal

I use Drupal 5 with Ubercart 1 (latest) and uc_subscribe module.
I see in uc_subscribe module that CC data for recurring payment is taken from uc_payment_credit table, but I cannot find the place in code where data is added to this table. I grepped sources of UC1, UC2 and still have no clue how it should work. Can anyone please point me the exact line or function?
Thanks in advance.

Ubercart doesn't store credit card data, unless you are in test mode. The CC data is generally stored by the payment gateway (authorize.net, paypal, etc). Storage of credit card data can only legally be done if your site is PCI Compliant.

Related

Is there a global database of all products with EAN 13 barcodes which i can integrate with my wordpress site?

EAN 13 is an international system. Is there an API or database that contains all items that have these barcodes? Like all food, goods you can buy in a regular convenience store. Is there a global open database for this that i could integrate with my Database and then use it by adding the just the barcode and the all info related to that product will be autopopulated?
Generally we have several different types of EAN code.
We can call them Gtin code.
It could be 8, 12, 13 or 14 digits long.
You could use this database:
https://market.mashape.com/mignify/gtin2product
It's a very user friendly and intelligent API, U can use it to get directly the product information by gtin. Also It could help u to extract the information of a page from E-commerce site.
And the free calls is enough for my necessary in my project.
Hold could help U. keep in contact.
Look here: https://www.outpan.com
It is an crowd sourcing project and there is also an API, where you can query an EAN code and it outputs detailed information.

Woocommerce Custom Delivary options

I want 2 functions in woocomerce:
1. Click and collect: This is where the customers puts in an order and comes to the store to collect it. The customer should be able to set approx time they want order to be ready for. The store should be able to set minimum time to have order ready.
With click and collect they have 16 stores so person should be able to choose store to collect and then receive a receipt for pick up at the store. They pay for goods on the website.
Each store needs to be able to receive the order either by having a dashboard or by email system.
Delivery: They will also have a delivery service where people can order larger quantities for delivery to their home or their business or event. this is more conventional eCommerce transaction.
Your best bet to add multiple locations for collection is a plugin like Local Pickup Plus. While it's certainly possible to add this functionality in yourself I'd recommend just buying a plugin. Having built something similar I came to the conclusion that -- accounting for my hourly rate -- I had saved myself no money whatsoever by building it from scratch.
i have created a advanced local delivery plugin, check this out a link

NopCommerce PCI

Running NopCommerce 3.40
I think i read somewhere that NopCommerce's Shopping cart is PCI compliant. It also looks like NopCommerce's shopping cart stores Credit card data.
1.) So what does this PCI process do?
2.) Is it just a fashion of encryption of data as it passes to the database?
3.) Is it my fault if the hosted database say from GoDaddy gets hacked for a bunch of credit cards?
I don't know why NopCommerce is storing Credit Cards. I think I have to figure out how to disable that part. I mean if I don't then I need to purchase a PCI Certificate?
EDIT :
I did some more reading. It looks like if I use Stripe or another third party gateway no Credit card information gets stored. I think only Manual Payments credit card information gets stored. Is this right?
1) PCI-DSS stands for Payment Card Industry Data Security Standard. The standard guides you so you know what are you doing with the cards data and that it is secure enough, given your transaction volume, data collected and stored, etc.
2) It is not. Basically, it says that if the card data (CC number, CVV code) ever pass near your system (in a logical sense), then you are in the PCI scope, and have to comply or the acquirers (banks) won't talk to you.
3) I think you'd be liable, look into GoDaddy disclaimers.
I doubt there's anything like 'PCI compliant shopping cart'. This is how you process the payment, as in, can your javascript access the CC number input box, can your router see the unencrypted CC number, etc.
In your case, I assume a small e-commerce, I'd look to outsource the payment page. Be it Stripe, PayPal, Skrill, Neteller, whatever makes you never see the data except for the income amount.

Recurring billing variable amount without storing credit card information

I have implemented few payment websites using PayPal Standard, PayPal Website Pro, PayPal Express and Authorize.Net.
Now I'm implementing a website which requires recurring billing. My only problem is variable amount, since I do not store credit card information, and amount is not fixed in each cycle.
Can we use either PayPal or Authorize.Net for my project? If not, could you please recommend any reliable payment gateway ($US for payment, and gateway located in US please) for that matter?
You can use a service like Authorize.Net's Customer Information Manager (CIM) to store the credit card and billing information for you and then you create your own scheduling engine that charges against the payment method you have stored for them using CIM. CIM also allows you to make off-cycle payments at any time as well.
Well the variable amount to bill shouldn't be a problem if you can put together whatever formula would be used in code. However if you aren't storing the actual credit card info (and I can understand why), then I don't see how you'd be able to charge the customer every month. Normally you need a credit card or bank information to do a direct transfer.
If you absolutely cannot store the information, then the only thing I can imagine is putting together an automated calculation and notification system that can send the customer an email with a link that brings them to a form so they can enter the information as simply as possible. Otherwise you'll need to save their credit card info somewhere secure and simply bill them every month, which isn't uncommon.
Have you looked into PayPal's IPN variables?
https://www.paypal.com/cgi-bin/webscr?cmd=p/acc/ipn-subscriptions-outside
Typically you have to cancel then reapprove a new subscription... but perhaps you can use the variables some how to do that programmatically.
I found a solution. PayPal calls ProcessReferencePayment.
At first, I need to charge the credit card using DoDirectPayment, and store the successful transaction number.
After that, I just call DoReferenceTransaction along with OrderTotal and ReferenceID (the previous transaction number).
DoReferenceTransactionRequestDetailsType
DoReferenceTransactionReq

How should I implement currency conversion in my Druppal application?

If an User has X amount of credits on his account (I think CCK can store this value). He can create specific Nodes (requests for admin). Each Node has a Type (Taxonomy defined, may be. Or via CCK). Each Type has associated number of credits. When user publishes a Node providing certain type, his balance of credits decreases by the number of credits Node Type has (admin will perform this request and send user notification email).
This is some kind of very simple e-shop for activation codes. I didn't want to use Ubercart due to it's complexity. May be this functionality can be achieved using some simple Drupal modules? Or may be there are some alternate ways? Or it is better to go Ubercart (can it do what I want BTW)?
I've seen folks in the Ubercart forums do this kind of thing for purchasing/posting ads on a site.
Check out these modules:
http://drupal.org/project/uc_store_credit
http://drupal.org/project/userpoints_ubercart
https://www.drupal.org/sandbox/taggartj/2343093
may be worth a look it is a credit system, adds a product feature to give user credits also has good helper functions to integrate with rules ect , also has a sub module to limit a content type by amount of credits and then deducts after the new node has ben created & has blocks to show the user their credits and credit history :)

Resources