X-Cart:PCI-DSS - Revision history

Mouse at 14:10, 22 July 2020

2020-07-22T14:10:07Z

Dohtur at 09:13, 13 August 2013

2013-08-13T09:13:23Z

Dohtur: Redirected page to X-Cart:PCI DSS

2013-08-13T09:12:28Z

Redirected page to X-Cart:PCI DSS

Dohtur at 09:02, 13 August 2013

2013-08-13T09:02:44Z

Dohtur at 08:57, 13 August 2013

2013-08-13T08:57:37Z

Admin at 13:33, 15 March 2013

2013-03-15T13:33:31Z

Seyfin: /* Is it allowed to store cardholder data (credit card numbers, expiration info, etc) in X-Cart database ? */

2013-02-13T09:48:41Z

‎Is it allowed to store cardholder data (credit card numbers, expiration info, etc) in X-Cart database ?

Seyfin: /* Is it allowed to store cardholder data (credit card numbers, expiration info, etc) in X-Cart database ? */

2013-02-13T09:48:31Z

‎Is it allowed to store cardholder data (credit card numbers, expiration info, etc) in X-Cart database ?

Seyfin: /* Is it allowed to store cardholder data (credit card numbers, expiration info, etc) in X-Cart database ? */

2013-02-13T09:12:12Z

‎Is it allowed to store cardholder data (credit card numbers, expiration info, etc) in X-Cart database ?

Seyfin: /* Is it allowed to store cardholder data (credit card numbers, expiration info, etc) in X-Cart database ? */

2013-02-13T09:12:02Z

‎Is it allowed to store cardholder data (credit card numbers, expiration info, etc) in X-Cart database ?

@@ Line 45: / Line 45: @@
 |}
-To get familiar with aspects of implementing PCI DSS please study the [http://www.braintreepaymentsolutions.com/assets/308/PCI-Compliance.pdf Braintree PCI DSS compliance Quick Guide]
+To get familiar with aspects of implementing PCI DSS please study the [https://www.braintreepaymentsolutions.com/assets/308/PCI-Compliance.pdf Braintree PCI DSS compliance Quick Guide]
 == Configuring X-Cart to meet PCI DSS (cardholder data is not stored)==
@@ Line 100: / Line 100: @@
 === Why use X-Payments ===
-[http://www.x-cart.com/x-payments.html X-Payments] is designed for merchants who accept credit card payments using [[X-Payments:User_manual#Appendix_A._Supported_payment_gateways|background payment gateways]]. Being a PA-DSS certified solution, X-Payments helps merchants to meet PCI standards. Connecting X-Payments to X-Cart saves merchants time and money when it comes to complying with PCI DSS.
+[https://www.x-cart.com/x-payments.html X-Payments] is designed for merchants who accept credit card payments using [[X-Payments:User_manual#Appendix_A._Supported_payment_gateways|background payment gateways]]. Being a PA-DSS certified solution, X-Payments helps merchants to meet PCI standards. Connecting X-Payments to X-Cart saves merchants time and money when it comes to complying with PCI DSS.
 === Understanding PA-DSS ===
@@ Line 153: / Line 153: @@
 * [[PCI FAQs]]
 * [https://www.pcisecuritystandards.org PCI Security Standards Council website]
-* [http://www.braintreepaymentsolutions.com/assets/308/PCI-Compliance.pdf Braintree PCI DSS compliance Quick Guide]
+* [https://www.braintreepaymentsolutions.com/assets/308/PCI-Compliance.pdf Braintree PCI DSS compliance Quick Guide]
 {{pdf single}}

← Older revision		Revision as of 09:13, 13 August 2013
Line 158:		Line 158:

	{{pdf single}}		{{pdf single}}
−
−	~~[[Category:X-Cart user manual]]~~
−	~~[[Category:PCI DSS]]~~

← Older revision		Revision as of 09:12, 13 August 2013
Line 1:		Line 1:
		+	#REDIRECT [[X-Cart:PCI DSS]]
		+
	{{XC 4.0\|or above}}		{{XC 4.0\|or above}}
	__TOC__		__TOC__

← Older revision		Revision as of 09:02, 13 August 2013
Line 158:		Line 158:

	[[Category:X-Cart user manual]]		[[Category:X-Cart user manual]]
−	[[Category:PCI-DSS]]	+	[[Category:PCI DSS]]

@@ Line 43: / Line 43: @@
 |}
-To get familiar with aspects of implementing PCI-DSS please study the [http://www.braintreepaymentsolutions.com/assets/308/PCI-Compliance.pdf Braintree PCI-DSS compliance Quick Guide]
+To get familiar with aspects of implementing PCI DSS please study the [http://www.braintreepaymentsolutions.com/assets/308/PCI-Compliance.pdf Braintree PCI DSS compliance Quick Guide]
 == Configuring X-Cart to meet PCI DSS (cardholder data is not stored)==
@@ Line 87: / Line 87: @@
 === Secure processing and transmission of cardholder data ===
-The easiest way to deal with PCI-DSS compliance is to use [[X-Cart:FAQs#What_is_.22web-based.22_payment_gateway.3F | web-based payment gateways]] to eliminate the need for customers to enter credit card details on your web-site and thus reduce efforts on meeting PCI-DSS compliance requirements. X-Cart is secure and supports quite a number of such “offsite” payment gateways like Paypal Express Checkout, Google Checkout, Checkout by Amazon, WorldPay, 2Checkout, Authorize.net SIM and many more.
+The easiest way to deal with PCI DSS compliance is to use [[X-Cart:FAQs#What_is_.22web-based.22_payment_gateway.3F | web-based payment gateways]] to eliminate the need for customers to enter credit card details on your web-site and thus reduce efforts on meeting PCI DSS compliance requirements. X-Cart is secure and supports quite a number of such “offsite” payment gateways like Paypal Express Checkout, Google Checkout, Checkout by Amazon, WorldPay, 2Checkout, Authorize.net SIM and many more.
 If your store has a [[X-Cart:FAQs#What_is_.22background.22_payment_gateway.3F | background payment method]] enabled, customers input their credit card data on the X-Cart side at the final step of checkout. It is highly recommended to disable background payment methods using the <u>Settings menu -> Payment methods</u> section of the X-Cart admin back-end. In this case you'll have to fill out the simplest of PCI Self-Assessment Questionnaires ([https://www.pcisecuritystandards.org/pdfs/pci_saq_a.pdf SAQ A]).
-If you want credit card data to be entered on X-Cart side, it's necessary to make sure that your store is implemented in a PCI-compliant hosting environment and your X-Cart is set up in a PCI-compliant manner, i.e. you use a PA-DSS certified software to process credit card payments. You'll have to fill out PCI [https://www.pcisecuritystandards.org/pdfs/pci_saq_c.pdf SAQ C] in this case.
+If you want credit card data to be entered on X-Cart side, it's necessary to make sure that your store is implemented in a PCI compliant hosting environment and your X-Cart is set up in a PCI compliant manner, i.e. you use a PA-DSS certified software to process credit card payments. You'll have to fill out PCI [https://www.pcisecuritystandards.org/pdfs/pci_saq_c.pdf SAQ C] in this case.
-==Configuring X-Cart to meet PCI-DSS with X-Payments application==
+==Configuring X-Cart to meet PCI DSS with X-Payments application==
 {{XC version|version=4.1.12|comment=or above}}
@@ Line 104: / Line 104: @@
 If a software application stores, transmits or processes sensitive cardholder data the application must
 be PA-DSS compliant.
-* Requires all payment applications be certified by an approved Payment Application-Qualified Security Assessor (PA-QSA). PA-QSAs are third-party security auditors, certified by the PCI-Security Standards Council (PCI-SCC) to verify that payment applications meet specified security standards
+* Requires all payment applications be certified by an approved Payment Application-Qualified Security Assessor (PA-QSA). PA-QSAs are third-party security auditors, certified by the PCI Security Standards Council (PCI SCC) to verify that payment applications meet specified security standards
 * PA-DSS payment applications must be implemented in a PCI DSS compliant environment
@@ Line 113: / Line 113: @@
 * X-Cart can be upgraded and customized without affecting the overall PCI compliance provided by X-Payments
-Examine the following pages on how to setup secure X-Cart with X-Payments in a PCI-DSS manner:
+Examine the following pages on how to setup secure X-Cart with X-Payments in a PCI DSS manner:
 * [[X-Payments:Introduction]]
@@ Line 136: / Line 136: @@
 ==FAQs==
-===Does PCI-DSS allow to use background payment methods with X-Cart ?===
+===Does PCI DSS allow to use background payment methods with X-Cart ?===
 No, this is not allowed. Since X-Cart is not a PA-DSS certified software you should configure it to avoid transmitting credit card data from your store to payment gateway by:
 * disabling [[X-Cart:FAQs#What_is_.22background.22_payment_gateway.3F|background payment methods]] in your store
-* or [[#Configuring X-Cart to meet PCI-DSS with X-Payments application]]
+* or [[#Configuring X-Cart to meet PCI DSS with X-Payments application]]
 ===Is it allowed to store cardholder data (credit card numbers, expiration info, etc) in X-Cart database ?===
@@ Line 151: / Line 151: @@
 * [[PCI FAQs]]
 * [https://www.pcisecuritystandards.org PCI Security Standards Council website]
-* [http://www.braintreepaymentsolutions.com/assets/308/PCI-Compliance.pdf Braintree PCI-DSS compliance Quick Guide]
+* [http://www.braintreepaymentsolutions.com/assets/308/PCI-Compliance.pdf Braintree PCI DSS compliance Quick Guide]

@@ Line 152: / Line 152: @@
 * [https://www.pcisecuritystandards.org PCI Security Standards Council website]
 * [http://www.braintreepaymentsolutions.com/assets/308/PCI-Compliance.pdf Braintree PCI-DSS compliance Quick Guide]
 [[Category:X-Cart user manual]]
 [[Category:PCI-DSS]]

@@ Line 144: / Line 144: @@
 ===Is it allowed to store cardholder data (credit card numbers, expiration info, etc) in X-Cart database ?===
-As per [https://www.pcisecuritystandards.org/pdfs/pci_fs_data_storage.pdf PCI DSS recommendations], you should avoid storing cardholder data electronically unless there is a legitimate business reason to do it; moreover some sensitive authentication data (for example CVC2/CVV2) MUST NOT be stored at all. When using X-Cart you should [[#Disable collecting of credit card data at user registration|disable collecting and storing of credit card data]].
+As per [https://www.pcisecuritystandards.org/pdfs/pci_fs_data_storage.pdf PCI DSS recommendations], you should avoid storing cardholder data electronically unless there is a legitimate business reason to do it; moreover sensitive authentication data (for example CVC2/CVV2) MUST NOT be stored at all. When using X-Cart you should [[#Disable collecting of credit card data at user registration|disable collecting and storing of credit card data]].
 ==See also==