On 16/09/2015 4:24 AM, William Dai wrote:
Need some guidance here.
I am thinking to have e-commerce enabled and am wondering whether we
should go with dj-stripe to get it working with cartridge, or go with
the built-in cartridge-stripe integration. which way is the right way
to go?
I have seen dj-stripe group very active but I have no idea the hidden
challenges to get payment working fine and secure.
Any comments appreciated.
Hi William,
I haven't used Stripe or cartridge-stripe, but my guess would be that
cartridge-stripe would be a good place to start. It does look out of
date, so you may need to fork it and make your own updates.
I've had to create some cartridge integration for payment processors
from scratch (wrapped around other modules) which wasn't *too* difficult:
https://github.com/molokov/cartridge_braintree (for Mez 3)
https://github.com/molokov/cartridge-pinpayments (for Mez 4)
However both these payment processors have a nice easy Javascript based
way to submit Credit Card Info from client to *their* servers without
the numbers ever passing into plain text on our servers - which makes
the PCI compliance factors for our servers much simpler. I don't know if
stripe has such a mechanism.
From that point of view, it was as simple as making sure the HTML/JS
generated from cartridge's templates & OrderForm matched what was
expected from the examples on their websites; that and rewriting the
payment handler (which is easy in Cartridge)
If Stripe has as simple a mechanism, perhaps you can look at my
cartridge-pinpayments as an example, and wrap dj-stripe in a similar to
way that I've wrapped django-pinpayments.
Hope this helps,
Seeya. Danny.
--
*Danny Sag*
Chairperson
Round World Events SA, Inc
City of Small Gods Terry Pratchett Fan Club - http://cityofsmallgods.org.au
*Nullus Anxietas VI - The Australian Discworld Convention* -
http://ausdwcon.org
"The Discworld Grand Tour" - Adelaide SA, August 4-6, 2017
--
You received this message because you are subscribed to the Google Groups "Mezzanine
Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
