Questions tagged [pci]
The pci tag has no usage guidance.
16
questions
3
votes
1
answer
663
views
Using stock Authorize.net gateway on Magento CE: a PCI compliant practice?
I seem to be getting conflicting answers on whether using the default Authorize.net gateway (either direct post or not) on Magento CE 1.9+ is a compliant process or not. Could someone clarify this for ...
- 376
3
votes
1
answer
72
views
Payment options in Website itself
Is there any extension(payment gateways, indian market) available to make the Payment in the website itself like in attached screen shot?
- 740
2
votes
1
answer
37
views
How can I process Credit cards on my Magento store?
My Magento store is PCI complaint. I don't like redirecting customers from my store to bank's website for entering credit/debit card details. Is there any way I can collect the card information on my ...
- 181
2
votes
0
answers
532
views
Magento 2 Cross site scripting vulnerability PCI scan
PCI scan in our servers recently failed due to cross-site scripting vulnerability in Magento 2 pages. They have requested like below to reproduce the issue.
REQUEST:
GET /2018-2019-random-url.html?&...
- 21
2
votes
0
answers
220
views
Preventing fraudulent credit card authorization attempts - carding
What are some solutions for preventing fraudulent credit card authorization attempts?
Magento captcha no longer seems to do anything and attempts with several reCaptcha modules has not worked either. ...
- 1,705
1
vote
1
answer
976
views
Offline credit card processing - displaying CVV number
I am developing a Magento website for my customer. He wants to process credit card payments offline, but in order to do this the customers' CVV number has to be displayed in the Orders section of the ...
- 11
1
vote
1
answer
129
views
How to make downloader URL HTTPS -- can't pass PCI scan
We are doing our scheduled PCI scan and for some odd reason, this year they aren't letting the magentostore.com/downloader url slide. It's being marked as an automatic failure due to the plain text ...
- 11
1
vote
0
answers
652
views
Magento 1.9 - How to set PCI Compliance script integrity check for merged js file
I had scan the site with PCI scan. But it is failed and its score is 7.8. Following are the scan results of PCI scan:
Title:
Script Src Integrity Check
Synopsis:
Report external script resources not ...
0
votes
1
answer
938
views
Magento 2 : What is PCI Compliance And How To Test It?
Can any one please Explain about PCI Compliance and any method for the testing site.
Thank you in advance.
- 2,766
0
votes
1
answer
62
views
Magento 1.7: PCI scan Can't Pass category URL with 'mode' param
Don't know why but the PCI scan do not pass Category URL of Magento and provide a SQL injection with 'mode' param in the below format.
/main-category/sub-category/l/price:10-20/category-name.html?dir=...
- 1,540
0
votes
1
answer
103
views
how to get magento ecommerse payment method saved cc without payment gateway?
I have created an online store in magento online store, everything is working well but am not getting saved cc option in payment method. why am not getting this option?
- 1
0
votes
1
answer
445
views
Magento 2 code validation "Unescaped output detected." when calling Product Attributes in phtml
I've created Magento 2 modules, now when I trying to validate my code with Magento code validator and I`m getting 'Unescaped output detected' in phtml templates where calling custom HTML attributes.
...
0
votes
1
answer
137
views
Magento 1.9 - Sanitization of Fields Required
I have to find PCI vulnerabilities in the Sanitization of fields. I have one form to submit data. In this, input fields of form should be sanitized.how to add a script for sanitization in magento1.9 ...
- 1,133
0
votes
0
answers
671
views
Magento1.9 - Failed to find a valid digest in the 'integrity'(PCI compliance)
I have generated the SHA-256 and added in the integrity tag like below.
<script type="text/javascript" integrity="sha256-65DEQpj8HBSb+/YImG+9LCeuQeRkm5NMpJWTH6hSuFZ+" src="example.com/media/js/...
0
votes
0
answers
164
views
PCI Compliance Scanning Tool For Any Version Of Magento Site
I am looking for a PCI Compliance scanning tool that can scan Magento websites ( Any version ) or Piece of Magento code. Please suggest.
I know there is a checklist available in DevDocs (https://...
0
votes
2
answers
63
views
Credit card Processing Dillemma
We have a card processing machine, in house.. However I am looking for a third party PCI compliant encrypted Company to save the credit card information, instead of our backend, for security purposes, ...
- 199