Shopsite 10 and PCI Compliance

extragear · Post by **extragear** » Thu Oct 23, 2008 11:05 am

Greetings:

We has our host, Lexiconn, upgrade our site to shopsite 10. So far everything looks ok. In the documentation, under

Security/Reliability

It states,

"Remote Orders Database (Pro, Manager, Starter)
Merchants who store sensitive customer information, such as credit card numbers, can configure ShopSite to store the sensitive order information in a remote database. Storing sensitive information on a remote server in an internal network zone is a PCI requirement."

Not sure what to make out of that. Does this mean there is a setting we need to change within shopsite? We currently download the order data and process the cc offline.

Thanks

Tim
Cycleluggage.com

Post by **Jim** » Thu Oct 23, 2008 11:22 am

Instead of the order data being kept in the same database as the pages, products, coupons etc. the orders can be kept on a remote server behind a firewall. It will have nothing to do with your downloading orders. You should talk to your host about using this feature. They would need to setup a postgres database on another server and allow you to connect to that server. If you use this feature you would need to do some configuration within ShopSite to let ShopSite know where and how to access the database.

extragear · Post by **extragear** » Thu Oct 23, 2008 12:02 pm

Jim

Thanks for the reply.

I contacted our host, Lexiconn, and they stated in our case this
wasn't applicable because the database is not web accessible.

Thanks

Tim

Cycleluggage.com