Thread

I am about to embark on a new project where I will require the site to be PCI compliant. A short overview is we will be taking credit card details on the site, and then passing them over to a third party system to handle payment.

I know there is several options in terms of shopping carts for EE, and as an alternative rolling my own module for the project. So this is not a big problem.

The question I really am asking is has anyone built a PCI compliant site with EE? What problems did they encounter, and does the standard install of EE pass a vulnerability test?

I found a post related to this question, which suggests that the standard install may cause issues? resolved thread.

Thank in advance

Here’s a talk Matt Weinberg did on e-commerce on EE and he covered the ins and outs of PCI compliance. There might be a video of the talk floating around, too.

http://eeinsider.com/blog/eeci-2010-e-commerce-on-ee/

Thanks Ryan for sending this through some interesting points mentioned.