cannuck1964

Quote

Depends on what you consider economical, will there be costs, of course there are. Try and set up a business without costs.
I too have spent hundreds of hours bringing clients into PCI conformity, there are many different aspects to it and each has it's own requirements. The PCI survey will generally tell you what you need to do.

Quote

Well lets see, clerk at min wage of say $10/hr x 40 hrs = $400 x 52 = 20, 800

PCI all costs incurred say $10 K.

Quote

True, but then there should not be for firms wanting to store this information. If they can not afford to do so, then they should look at alternatives.

I am pretty sure there are methods to extract and use quickbooks as the inventory management (export / import features). In terms of the online sales having issues with the inventory, generally inventory and sales can be tracked and averaged.

So that if on average the in store sells X items per day, and inventory takes X days to replenish, then you know how many you can safely sell on line. So when inventory drops to a specific level, then it is either taken off of on line sales, or is listed with a disclaimer of late shipping.

In 99% of the transactions this will work just fine, and if you have a margin of error built in, then you will not have any major issues.

A CRON running daily (or more often) would ensure that inventory levels are always in sync.

cheers

Quote

Not true.

The PCI standards only increase when you save credit card data. What can not be saved (and may create issues is the CVV code).

To save the CC number, card holder name etc can be done in a safe manor, but this means a higher standard for the web site to adhere to, for example, the CC info must be encrypted, can not use a shared server, must limit who has access to the data etc.

The compliance survey will give better indication on what the standards needed are.

When saved, you would generally send an authorize request to the CC processor, and then at a later date capture the payment (maybe having to make total adjustments ).

cheers

Quote

change the word should to must

This is part of the released conditions.

If you are open to your customers, on what you are using, what you are doing, generally if you provide the services, you will not be sued...

cheers and good luck in your endevours...

DunWeb, on 22 August 2011, 15:04, said:

The seller need not make any changes and can still sell osC. If I found someone is willing to pay me I could sell them the cart without making any changes at any time. The GPL allows anyone to sell the software as is, renamed to a new name (without changes) or anything else. What you can not do is change the licensing, encrypt the logic or remove any of the copyrights.

cheers

Peter

Quote

Yes, this also leaves you open to liability issues, and if the credit card companies find out, they can remove your credit card processing entirely from your business (and sue you for any losses they incurred).

Quote

The CVV is never to be stored, it is used and discarded, even PCI does not allow for the saving of this value..

cheers