Confused about Credit Cards

Posts: 47
Joined: 01/20/2008
Bug Finder

I've spent ages reading about Credit Cards and Ubercart, but I just don't get it.

I think it might be because I am from the UK where credit cards (might) work differently.

Here is how I understand Credit Cards work in Ubercart. Could someone correct me if my thinking is wrong:

1) You need a third party to process credit card payments.
This is because Ubercart is not capable of turning credit card details into money.

2) Out of the box, the only UK compatible third party Ubercart supports is Pay Pal Payments Pro.
Pay Pal Payments Pro doesn't work in the UK, so the only out-of-the box solution is PayPal Standard, which means customers have are taken off-site to make a payment.

3) What if you own a bricks-and-motor store and already have means of taking credit card payments?
Could you use that to take payments online?
This is the bit that confuses me.
It doesn't seem like you could as physical stores need a PIN number to process payment, which you don't enter for online purchases. (In the UK, paying with a credit card at a store uses a chip & pin system).
But then, if you can't take payments using a physical machine, why does the ubercart configuration page talk about credit card encryption. In fact, why would an ubercart installation need to store credit card details at all, if it needs a third party to process the details?

Any help understanding this issue would be most appreciated.

littly_kitty

Posts: 5269
Joined: 08/07/2007
AdministratorHead Code Monkey - I eat bugs.

I'm not sure what payment solutions work for folks in the UK... and I'm not really sure what it would take for the core PayPal module to be compatible in the UK. I guess I just haven't had a chance or the ability to test it.

CC encryption gets configured so you can store some encrypted CC data during checkout on the review form. The data entered in the checkout form gets lumped into a variable, encrypted, and displayed as a hidden value on the form. The key to decrypt the info is only available on your web server, so the data remains safe even if the customer were to physically leave the computer with that page still open. It gets decrypted when the form is submitted and sent off to the payment processor from there. Also, it is possible in debug mode to still store CC data temporarily if you need to do some testing or process cards offline.

Posts: 21
Joined: 02/19/2008

Not exactly UC related, but if you use one of these 3rd party jobs to process cards do you need to get a certificate from your host?

Posts: 88
Joined: 04/23/2008

For "bricks & mortar", I believe if you are processing the card offline, you do not need the PIN number. What you will need is the CVV number which Ubercart does store. But for security reasons, latest version of Ubercart only stores last 4 digits of card by default. Unless you run in debug mode... as suggested by Ryan.

There is a Worldpay module in the forum or in contributions, and that is quite popular in the UK too.

Posts: 84
Joined: 06/24/2008

1. Ubercart is an e-commerce solution not a payment processing solution. You'll off course require third party solution to get credit card converted into money/cash. If you want your users to stay within your website then I think "Paypal Website Payments Pro UK" is the only way with which you can do that, but Ubercart may not support it currently. And the rest of the payment processing solutions like 2Checkout.com, Authorize.net (for USA only) and Cybersource.com all requires customers to make off-site payment. Summary is that, only those who uses "Paypal Website Payments Pro USA" are able to make customers to pay on their website using ubercart, currently.

2. And Paypal Website Payments Pro is supported in UK. Check this link https://www.paypal.com/IntegrationCenter/ic_uk-pro.html

Posts: 47
Joined: 01/20/2008
Bug Finder

Thanks for the replies everyone. I think I finally get it. Smiling

Quote:
2. And Paypal Website Payments Pro is supported in UK. Check this link https://www.paypal.com/IntegrationCenter/ic_uk-pro.html

As I understand it (from talking to the UK PayPal team), Paypal Website Payments Pro UK uses a different API from the US one and will not work with Ubercart. According to the support team, it is quite easy to hack it to make it work, but that is currently beyond my technical know-how.

Quote:
There is a Worldpay module in the forum or in contributions, and that is quite popular in the UK too.

I wanted to try that out, but the £200 set up fee put me off. Does anyone know if there is a free way to test out Worldpay?

Smiling

Posts: 84
Joined: 06/24/2008

littly_kitty wrote:

As I understand it (from talking to the UK PayPal team), Paypal Website Payments Pro UK uses a different API from the US one and will not work with Ubercart.

It would have been better if the name Paypal Website Payment Pro in Ubercart also uses USA to avoid confusion. i.e, "Paypal Website Payment Pro USA".

Posts: 47
Joined: 01/20/2008
Bug Finder

One more quick little question.

If I am using Pay Pal standard (the one that takes the user away from the site to make a payment), then do I still need to enable credit card encryption?

^_^

Posts: 5269
Joined: 08/07/2007
AdministratorHead Code Monkey - I eat bugs.

Nope. You can just disable the credit card module.

Posts: 5
Joined: 04/03/2008

Hi,

Could you recommend a solution to me?

I've PayPal Payments Standard enabled...
...disabled credit card, because I had problem to understand how it works or why it doesnt Smiling
Did some test shopping (friends/me), but it stopped on "pending".

How I could receive credit card payments anyway via my drupal/übercart site?
(Normal PayPal payments works fine.)

Thanks for your help!
Zoltan

Posts: 5269
Joined: 08/07/2007
AdministratorHead Code Monkey - I eat bugs.

If you want to accept CC payments through your site, you have to upgrade your PayPal account and use Website Payments Pro... for this you'll also need an SSL certificate. I know this is available for the US version, but we don't have much experience with the international versions.

Posts: 84
Joined: 06/24/2008

I can never use Paypal Payments Pro. They do not support my country and I don't think they're likely to in near future. I've to always stick with Paypal Standard Payment. Too bad for my country Sad

Posts: 5
Joined: 04/03/2008

Thx for the quick reply!

I think this was the source of my misunderstanding:
https://www.paypal.com/hu/cgi-bin/webscr?cmd=xpt/Marketing/general/Payme...

Here they are mention CC payment under the Standard service...