[osCmax v2.5x] Payment Card Industry (PCI) Compliance

[BrianM]

I am looking at some of the osCommerece shopping software and wanted to understand what qualifies as Payment Card Industry (PCI) compliant? CRELoaded brags about it and no one else seems to even mention it.

[pgmarshall]

PCI compliance is all to do with proving that you are doing your best to keep your clients' credit card details safe ... now CRE makes a big deal because they do the payment processing for quite a few of their users ... osCmax and others do not tie you to this ... you are more than welcome to make yourself PCI compliant but most small to medium sized businesses allow their payment processor to handle the PCI stuff eg. PayPal, Google Checkout, WorldPay, etc.

PCI compliance is hard work and since other companies can do it for you for no extra cost - why not let them get on with it? I fundamentally don't think it is a good to store client credit card details in your store ... further more people are more and more wary of site requesting their cc details ... people trust PayPal, Google, etc. to look after their data ... wisely or otherwise!

If you are looking for a store solution - look at the feature list, cost up any non-standard stuff you need, checkout the forums, wiki, etc. Payment processing is (in my opinion) something best handled by specialists.

Demo a few options at Open Source CMS Demos & Information - opensourceCMS

This article weighs up some pros and cons ... Magento, Oscommerce, ZenCart, X-Cart, CRE Loaded, OSC Max, Virtuemart, Comparison & Review of Shopping Carts

You really need to look at what you want to achieve - although since I am biased I will recommend osCmax - it really is free ... no hidden costs, charges, etc.

Regards,