Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [pci]

The tag has no usage guidance.

0
votes
0answers
11 views

Are SAQ Assessments and QSA Assessments the same thing in PCI-DSS compliance?

I'm taking a class on PCI-DSS compliance, and the class mentions SAQ Assessments first and later they mention QSA assessments. They sound like the same thing, but are they? The same thing being ...
0
votes
0answers
39 views

PCI Compliance Scanning Tool For Any Version Of Magento Site

I am looking for a PCI Compliance scanning tool that can scan Magento websites ( Any version ) or Piece of Magento code. Please suggest. I know there is a checklist available in DevDocs (https://...
0
votes
0answers
17 views

ASV scan failing because of Session ID in URL

We're on a Magento 1.9.3.7 and our Aperia ASV scan is failing because of Session ID in URL. One example would be the following https://mystore.com/category.html?SID=rmdfi0m0gibepot9eom7egj384 Payload:...
2
votes
0answers
222 views

Magento 2 Cross site scripting vulnerability PCI scan

PCI scan in our servers recently failed due to cross-site scripting vulnerability in Magento 2 pages. They have requested like below to reproduce the issue. REQUEST: GET /2018-2019-random-url.html?&...
0
votes
1answer
39 views

Magento 1.7: PCI scan Can't Pass category URL with 'mode' param

Don't know why but the PCI scan do not pass Category URL of Magento and provide a SQL injection with 'mode' param in the below format. /main-category/sub-category/l/price:10-20/category-name.html?dir=...
1
vote
0answers
141 views

Preventing fraudulent credit card authorization attempts - carding

What are some solutions for preventing fraudulent credit card authorization attempts? Magento captcha no longer seems to do anything and attempts with several reCaptcha modules has not worked either. ...
2
votes
1answer
29 views

How can I process Credit cards on my Magento store?

My Magento store is PCI complaint. I don't like redirecting customers from my store to bank's website for entering credit/debit card details. Is there any way I can collect the card information on my ...
3
votes
1answer
42 views

Payment options in Website itself

Is there any extension(payment gateways, indian market) available to make the Payment in the website itself like in attached screen shot?
1
vote
1answer
761 views

Offline credit card processing - displaying CVV number

I am developing a Magento website for my customer. He wants to process credit card payments offline, but in order to do this the customers' CVV number has to be displayed in the Orders section of the ...
0
votes
2answers
41 views

Credit card Processing Dillemma

We have a card processing machine, in house.. However I am looking for a third party PCI compliant encrypted Company to save the credit card information, instead of our backend, for security purposes, ...
3
votes
1answer
538 views

Using stock Authorize.net gateway on Magento CE: a PCI compliant practice?

I seem to be getting conflicting answers on whether using the default Authorize.net gateway (either direct post or not) on Magento CE 1.9+ is a compliant process or not. Could someone clarify this for ...
1
vote
1answer
124 views

How to make downloader URL HTTPS — can't pass PCI scan

We are doing our scheduled PCI scan and for some odd reason, this year they aren't letting the magentostore.com/downloader url slide. It's being marked as an automatic failure due to the plain text ...
0
votes
1answer
98 views

how to get magento ecommerse payment method saved cc without payment gateway?

I have created an online store in magento online store, everything is working well but am not getting saved cc option in payment method. why am not getting this option?