CFWebstore^® has support for many popular payment gateways built-in so that you can take online credit card orders. Support for new tokenization technology is also provided for processors that support it (currently through Shift4 payment gateway only). It also has advanced support for delayed billing, allowing you to authorize cards at the time of sale and then batch process them later when orders ship. The latest release also includes support for gateways that handle the credit card data collection on their server, instead of yours, which resolves most current PCI compliance requirements. The following settings are available to configure your store for accepting credit cards:

 
 

1. Use Credit Cards – This turns on the form for taking a credit card payment. You can leave this off if you only take offline or PayPal standard orders.
2. Use CRESecure – This is a new service that “wraps” the credit card form automatically in your store layout so it’s virtually unnoticeable to the user that the credit card form is being handled by another site. This gives you the best possible security, and also provides support for additional gateways that CFWebstore does not handle. Please note that if you wish you use features like the Billing Tab and refunds you will still need to select your processor and configure it, otherwise you can leave the rest of the settings alone, as the gateway is configured at the CRE Secure site.
3. Online Processor – Select the credit card processor you wish to use. A processor must be used for credit card orders but for demo modes you can leave this set to ‘None’.
4. Cards Accepted – Select the credit cards you are able to accept.
5. Use CVV2 – Use this to require the customer to enter the 3-digit CVV2 code from the back of their card. This setting may be required for some online processors, and is widely supported now. PayPal Pro for instance requires that you have it turned on. In many cases, use of the CVV2 will lower your merchant rates as well.
6. Store Tokens – Currently CFWebstore only supports storing of card data for payment processors that support tokenization (currently Shift4), as PCI Compliance regulations do not allow saving card data without extensive encryption setups and expensive secure server maintenance. Please note that the card token is only saved while the order is pending, once it is moved to In Process or Filled, the card data is removed and only the last 4 digits is saved. This information is all that is generally needed for processing any returns with online gateways. If you want to save the token for re-charges or recurring billing, turn on the Save Card feature in the User Settings as well.
7.  Use Billing Tab – This feature activates the Billing tab in the Order Manager and its related features. Most stores will charge the customer's credit card for full order amount at the time of purchase. However, some stores choose to only authorize the credit card at the time of purchase and actually capture the funds when the order is shipped. When the Billing tab is turned on, credit card orders are not automatically set to "paid" upon checkout (it is assumed that they have only been authorized. The orders which are not paid will then appear under this tab available for capture. This is useful to integrate with batch processing for your credit card processor (built in already with certain processors, see below for information).

 

Card Processing

 
After saving your payment settings, you can configure your payment gateway by clicking on the Card Processing tab. The settings will vary according to the gateway you are using.
 

1. Authorize.Net – Authorize.Net is the recommended processor to use as it is easy to set up, reasonably priced and widely used. The custom tag is built into the store so there is nothing to install. Just enter your account settings in the Payment Settings and configure your AuthNet account as to which AVS and CVV2 transactions you wish to decline.
2. EZIC – The EZIC tag is also built into the store. This is a good alternative if you don’t want to use Authorize.Net.
3. Skipjack – Another lowcost alternative, the tag is built in as well. At this time, EZIC and Skipjack do not support billing tab options.
4. Verisign PayFlow Pro – Now owned by PayPal, PayFlow payments offers two types of service, PayFlow Pro and PayFlow Link. Only PayFlow Pro is supported. This is a more expensive gateway than some but is preferred by some merchants who do large amounts of business and need very reliable service.
5. SkyPay – A popular processor for merchants in the UK. The tag is built into the store. You can configure it to process payments immediately or later (authorization only) and to use a AVS and CV2 check (be sure to turn on the CVV2 field to use the card check).
6. Shift4 – Shift4’s $$$ On the Net offers a number of features you won’t find with other processors. They have a direct link to American Express servers which allows you to use the card check code unlike other processors like Authorize.Net. They use tokenization so if you need to do recurring billing, you can do this without storing credit card data and putting your customer’s information at risk. You can also use their gift card feature on your store. The newest version of CFWebstore also includes support for split payments and their new i4Go service which handles payments on their server, much like CRESecure, but without additional fees. See Shift4's web site at www.shift4.com for current product information and pricing. The proxy settings are optional and only required if your web server uses a proxy server for outbound communication. Most web servers do not use proxy servers. Leave Server Name blank if unused. Contact your ISP or system administrator if you are not sure.
7. USA ePay – A newer processor, includes delayed capture support.
8. PayPal Pro – This setting will configure your store to use PayPal Pro for processing credit card orders. In addition, your customers will have an option for checking out using PayPal Express. See the section above on PayPal Express and how to configure the API settings.

 
 
additional notes: For stores that ship physical goods, you are usually required to use an Authorize Only setting at the time the order is placed, and capture funds when it is shipped. For Authorize.Net, PayFlow Pro, SkyPay, USA ePay and Shift4, you can use the Billing Tab feature to capture funds. For other processors, you will need to manually capture the funds using the online merchant tools for your gateway.
 
For web stores that sell subscriptions, services or downloadables, you can capture funds at the time of sale and the 'Use Billing Tab' option can be disabled. (By using these settings, you will lose the order details with Shift4.)