Jump to content

Mooneybookers in 1.3


Timpet

Recommended Posts

The "new" mooneybookers module uses ifram to open the https connection to moneybookers.

This should only be allowed on SSL servers.

1. Have moneybookers aproved this on non SSL servers?

2. How can prestashop accept putting safety at risk in this way?

Link to comment
Share on other sites

  • 1 month later...

I've just got my moneybookers account active and I asked this on the phone and they confirmed it was ok, as the iframe is secure between users and them.

I'm not totally up on it, but if they say its ok - thats good enough for me.

Dan

Link to comment
Share on other sites

want about the missing secure connection icon in the browser? Are your costumers ok with that? Its a hole nother issue, but im sure you are loosing costumers using this. I would for sure never ever give my creditcard infomation on a site not showing the secure connection icon!

Link to comment
Share on other sites

Fair point...

I don't believe that there is any real risk of details being captured as the iframe acts as a different page to the unsecured page itself.

I asked again on the phone and they confirmed again that the Prestashop module is ok, and secure for use with Moneybookers.

I guess its one of those compromise things. Moneybookers is free (apart from the transaction fees, which are much less than any other on the market), it works, and its secure - you'll have to spend a little bit extra time making sure your customers know your company ethics, and know that you aint going to scam them, or put you in a position of being scammed.

Easiest way - spend what can be a fortune on a SSL certificate...

Link to comment
Share on other sites

True... I dont know much about iframe and how it works my self. I have read that it could be compromissed, but must thing can i guess. I'm just pointing out the issue's.

I have asked our clearinghouse if they would allow our gateway to show the payment window in iframe, and they will NOT allow it. Last end it is the costumers how gets there card abused, so i those not to use it, perhaps saving one of my costumers the trouble.

Link to comment
Share on other sites

  • 2 months later...

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...