accepting debit/credit card payment

tkm

Hello Guys,
It would be great if you can help me with some suggestions. I have integrated paypal payment module for my client's e-commerce php web-site. Now they want an option to receive payments directly, without using paypal or any third party provider. So that will take user card details charge maoney later. Now, i ahven't done this kind of functionality before (without using any third party provider). I can surely save the card information in the database through a form. But what happens next? How can I/they credit the momey from buyer's bank? Do they need to have any legal permission from any authorities? Do I need to add any php module? Any advise would be a great help.
Thank you.

Kudose

Try searching the forum for payment processing ... here is I thread I took part in not too long ago.

http://phpbuilder.com/board/showthread.php?t=10362255&highlight=linkpoint

sandthipe

Paypal will let you collect numbers and charge later.

now to your question:
you can accept credit card numbers all day in a database, the problem comes when you have to submit those numbers for processing. without a processing company (like paypal), you'll have to negotiate a direct processing agreement with each credit card company separately. this is not cheap - that's why processing companies exist; they can spread the connection fee out to all of their customers.

PLUS, and this is very important, when you store credit card numbers you have to meet minimum security requirements to do so legally. As I understand it, those requirements are 128-bit (256 recommended) encryption (not hashing) and a hardware firewall on the web server.

recommend using a processing company.

dagon

Don't save the card information with out your card process express permission. Credit card companies OWN the credit card details, they can get very nasty if you don't follow their rules precisely. I know some one who lost their business because the card companies black listed them for storing the card details.

Weedpacket

To a first approximation of what you need to do to get permission, you have to comply with the PCI DSS (and if you don't already know what that is, you're not yet in a position to be storing credit card details!). Visa give a good overview.