- Posts: 3
- Thank you received: 0
Security issue with Stripe plugin
- David
- Topic Author
- Offline
- New Member
Less
More
6 years 11 months ago #107977
by David
Security issue with Stripe plugin was created by David
Hello,
I have installed Stripe payment plugin and got a security alert message from Stripe that the plugin is passing a full credit card detail which is high security risk.
They strongly recommend one method called tokenization. Just wondering if you can update the plugin with the new method.
Here is an email from Stripe:
====================================================
Hello there, and welcome to Stripe!
We noticed that you are passing your cardholder's full credit card number to Stripe's API. We strongly discourage you from handling this information directly because doing so:
Potentially exposes your customer's sensitive data to bad actors
Excludes your payments from protection by Radar, Stripe's fraud protection solution
Requires your business to meet complex and burdensome PCI compliance requirements
To keep your customer's information safe, we were unable to process the unsafe charge you just sent us. In order to process payments securely on Stripe, change your integration to collect payment information using tokenization. Tokenization ensures that no sensitive card data ever needs to touch your server.
In rare cases, you may have to continue handling full credit card information directly. If this applies to you, you can enable unsafe processing in your dashboard.
For any questions, just reply to this email and we'd be happy to help.
Yours,
The Stripe Team
I have installed Stripe payment plugin and got a security alert message from Stripe that the plugin is passing a full credit card detail which is high security risk.
They strongly recommend one method called tokenization. Just wondering if you can update the plugin with the new method.
Here is an email from Stripe:
====================================================
Hello there, and welcome to Stripe!
We noticed that you are passing your cardholder's full credit card number to Stripe's API. We strongly discourage you from handling this information directly because doing so:
Potentially exposes your customer's sensitive data to bad actors
Excludes your payments from protection by Radar, Stripe's fraud protection solution
Requires your business to meet complex and burdensome PCI compliance requirements
To keep your customer's information safe, we were unable to process the unsafe charge you just sent us. In order to process payments securely on Stripe, change your integration to collect payment information using tokenization. Tokenization ensures that no sensitive card data ever needs to touch your server.
In rare cases, you may have to continue handling full credit card information directly. If this applies to you, you can enable unsafe processing in your dashboard.
For any questions, just reply to this email and we'd be happy to help.
Yours,
The Stripe Team
Please Log in or Create an account to join the conversation.
- Giang Dinh Truong
- Offline
- Administrator
6 years 11 months ago #107980
by Giang Dinh Truong
Replied by Giang Dinh Truong on topic Security issue with Stripe plugin
Hello David,
We released the latest version 2.8.1 of EShop and EShop Stripe payment plugin few days ago. In the latest release, we implemented the Stripe.js v2 for EShop Stripe payment plugin to meet the security requirement from Stripe.
Please read more about release note at www.joomdonation.com/forum/released-vers...html?start=20#107907
After that, download the latest version of EShop to update it to your site first, then download the latest package of EShop Stripe payment plugin, go to EShop -> Plugins -> Payments to install it from there and you are done!
Hope that this is useful.
Sincerely, Giang
We released the latest version 2.8.1 of EShop and EShop Stripe payment plugin few days ago. In the latest release, we implemented the Stripe.js v2 for EShop Stripe payment plugin to meet the security requirement from Stripe.
Please read more about release note at www.joomdonation.com/forum/released-vers...html?start=20#107907
After that, download the latest version of EShop to update it to your site first, then download the latest package of EShop Stripe payment plugin, go to EShop -> Plugins -> Payments to install it from there and you are done!
Hope that this is useful.
Sincerely, Giang
Please Log in or Create an account to join the conversation.
Moderators: Giang Dinh Truong
Support
Documentation
Information
Copyright © 2024 Joomla Extensions by Joomdonation. All Rights Reserved.
joomdonation.com is not affiliated with or endorsed by the Joomla! Project or Open Source Matters.
The Joomla! name and logo is used under a limited license granted by Open Source Matters the trademark holder in the United States and other countries.
The Joomla! name and logo is used under a limited license granted by Open Source Matters the trademark holder in the United States and other countries.