Payment Gateways & Pci

[grunt]

Hi,

 

I have read many post here about this. Now I am totally confused. ( A fairly normal state for me.)

 

Do all the gateways require you to be PCI complaint or are there some that do and some that don't?

 

Domain sales, the same questions on the apis?

 

Thanks,

Confused in NC

[grunt]

Lets close it guys, if I can't install it by now, it is probably me. Thanks for everyone's help!

 

Thanks to All!

Ed

[evolvewh]

Hi,

 

I have read many post here about this. Now I am totally confused. ( A fairly normal state for me.)

 

Do all the gateways require you to be PCI complaint or are there some that do and some that don't?

 

Domain sales, the same questions on the apis?

 

Thanks,

Confused in NC

Not all gateways require you to be compliant but it is a good idea to be. The non merchant gateways do not require it and some of the merchant gateways don't, including Stripe, Paypal Payflow Pro and possibly others. When we used Bluepay, we had to be PCI Compliant.

 

Not sure what you mean about the domain sales / api.

[grunt]

Thanks!

 

On the api issue, I was referring to Enom, when a customer buys a domain. I was guessing Blesta had this feature, I haven't used it in years. Sorry for the confusion.

 

Best Regards,

Ed

[evolvewh]

Thanks!

 

On the api issue, I was referring to Enom, when a customer buys a domain. I was guessing Blesta had this feature, I haven't used it in years. Sorry for the confusion.

 

Best Regards,

Ed

No worries. You'll need a reseller account with them and then you can enter your credentials into the Enom modules that comes with Blesta.

[Max]

Not all gateways require you to be compliant but it is a good idea to be. The non merchant gateways do not require it and some of the merchant gateways don't, including Stripe, Paypal Payflow Pro and possibly others.

 

The way Blesta implements things you do need full PCI complaince with all merchant gateways.

 

Whether or not the PSP will actually check you are compliant beforehand is a different question.

However if you are ever compromised and it turns out you were not, things may get expensive.

 

 

Some PSPs also require you to self-certify how you are using them, and may have follow-up questions if you answer that truthfully.

 

 

Note that Blesta does NOT use tokenization clients like stripe.js.

[grunt]

Would it be secure to use Blesta on the same box you host sites on or do you need a separate box?

 

Thanks for all the help people!

Ed

[Michael]

Would it be secure to use Blesta on the same box you host sites on or do you need a separate box?

 

Thanks for all the help people!

Ed

 

Blesta is secure anywhere but it's good practice to have Blesta if you can offside incase the server goes down, or your client server is comprised by a Wordpress outdated exploit.

[grunt]

OK, Now I just have to figure why it won't install.

 

 

Thanks!

[Paul]

OK, Now I just have to figure why it won't install.

 

 

Thanks!

 

I replied to your PM, see if you can enable error reporting. Possibly missing a system requirement. 

[grunt]

Ran install with Configure::errorReporting(-1);

 

Didn't see outputting, and can't find any error log???

 

Thanks!

[Paul]

Ran install with Configure::errorReporting(-1);

 

Didn't see outputting, and can't find any error log???

 

Thanks!

 

Have you checked that your server meets the minimum system requirements? If you still get a blank page, your php.ini may also have error_reporting completely disabled. Depending on your server, errors would be written to your httpd logs, or a php error log. Normally this would be in /var/log/httpd/ but if you're running cPanel or Interworx the location may be different.

 

I tried visiting the link you PM'd me to your install, but there was no DNS resolution. Is the link correct?

[grunt]

Hi,

I checked the php settings. Error reporting is enabled. All the checks for requirements said they were enabled and correct. The link should be valid again, I changed permissions when I signed off last night.

 

Can find no log entries other than apache_error logs, which shows a lot of hits from 66.xxx.xx.xxx.

 

kindest Regards,

Ed

[Paul]

Interesting, when does the blank page occur exactly? What information did you submit when it happened? Do you have port 443 egress open at your firewall? The blank page could be a result of the inability to make an HTTPS request for license check, or, more commonly, there is a MySQL error.

 

What you might try is dropping all the tables in your database if they have been created, and trying the install over again from scratch. You'll also need to remove your config/blesta.php config file and re-upload the blesta-new.php file to that directory.

[grunt]

Hi,

"Interesting, when does the blank page occur exactly?"

As soon as you enter license and login info for the admin account.

 

"Do you have port 443 egress open at your firewal"

443 TCP IN and Out allowed. Not UDP.

 

Will try the rest, thanks,

Ed

[grunt]

PS:

 

Where is the blesta-new.php? Don't appear to have one.Thanks!

[Michael]

PS:

 

Where is the blesta-new.php? Don't appear to have one.Thanks!

 

It might have changed to blesta.php when attempted to install: /config/ folder, if it has changed you need it from the zip.

[Paul]

PS:

 

Where is the blesta-new.php? Don't appear to have one.Thanks!

 

You'll want to upload a fresh copy of config/blesta-new.php from the Blesta ZIP file.

[grunt]

New install says the trial license you sent is invalid.

[Michael]

New install says the trial license you sent is invalid.

 

Have you moved the installation (folder, IP, hostname)?

[Paul]

The key is still in a re-issue state, which means it has not been used. This generally only happens if your server cannot reach our license servers (usually 443 tcp egress is closed) or if you are overloading mbstring (see https://docs.blesta.com/display/user/Installing+Blesta#InstallingBlesta-LicenseValidationIssues)

[Michael]

Lets close it guys, if I can't install it by now, it is probably me. Thanks for everyone's help!

 

Thanks to All!

Ed

 

If you still have issues feel free to PM me and I'll see if I can find the issue for you.