使用 PayPal 的“Website Payments Pro”存储信用卡信息？
我正在开发一个电子商务网站，一些客户会经常在该网站上进行在线购买。话虽如此，我正在尝试找到一种解决方案，使我能够使用 Website Payments Pro 安全地存储信用卡信息，这样客户就不需要在每次购买时重新输入信用卡信息。我知道信用卡“标记化”服务，例如 Braintree，但它们要求您使用他们的整个支付平台。 PayPal 已确认存在可与 Website Payments Pro 配合使用的第三方购物车，该购物车可以安全地存储信用卡信息（只要我符合 PCI 标准），但不会向我指出此类信息。
有谁知道可以满足我的需求的第三方服务吗？感谢您的时间和帮助！
大卫
I am developing an e-commerce website where some customers will be making frequent online purchases. With that said, I am trying to find a solution that will allow me to securely store credit card information, using Website Payments Pro, so customers do not need to re-enter credit card information every time that they make a purchase. I am aware of credit card "tokenization" services like Braintree, but they require you to use their entire payment platform. PayPal has confirmed that there are third party shopping carts out there that work with Website Payments Pro, that would securely store credit card information (as long as I am PCI compliant), but would not point me in the direction of one.
Does anyone know of a third party service that would fit my needs for this? Thanks for your time and help!
David
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（5）
您可以利用 PayPal 的参考交易 API，将交易 ID 作为参考进行未来的交易，而无需输入信用卡信息。这样您的客户就可以全年进行付款。
或者，您也可以将计费协议 ID 作为未来交易的参考。这样 PayPal Payments Pro 会自动从之前的交易中选择所需的详细信息。计费协议 ID 的优点是与交易 ID 不同，它没有 1 年的时间限制
You can make use of PayPal's Reference Transactions API that makes a transaction ID as reference to make future transactions without entering their credit card information.This way your customers can make payments throughout the year.
Alternatively you can also make the billing agreement ID as the reference for future transactions.This way PayPal Payments Pro will pick the required details automatically from the previous transaction.Billing agreement ID has the benefit that it is not time bound for 1 year unlike transaction ID
安全地存储信用卡信息非常非常困难。事实上，就在两天前，1.3 亿信用卡号被宣布 是从主要零售和金融公司窃取的，这些公司拥有比您可能拥有的更多资源来保护这些数据。
我完全理解轻松促进定期付款的愿望。但是，在决定这样做之前，请仔细考虑并了解与存储信用卡号码相关的风险。
如果您决定需要存储卡号，我建议您聘请一位具有良好记录的安全专家来帮助设计您的解决方案，然后在实施后对其进行审核。
It is very, very difficult to securely store credit card information. In fact, it was announced just two days ago that 130 million credit card numbers were stolen from major retail and finance companies that have far more resources than you probably do to secure that data.
I fully understand the desire to easily facilitate recurring payments. However, think though and understand the risk related to storing of credit card numbers before deciding to do so.
If you decide that you need to store the card numbers, I recommend hiring a security expert with a proven track record to help design your solution and then audit it once it's in place.
我认为更好的解决方案是使用 paypal Vault
所以流程应该如下
您将客户信用卡存储到保险库，并从 PayPal 取回卡 ID。
您可以使用该卡 ID 进行交易，或将该卡 ID 与客户信息一起保存在数据库中以便将来进行交易
注意：
I think the better solution would be using paypal Vault
so the flow should be as follow
you store customer credit card to vault, and get a card id back from paypal.
You can use that card id to make a transaction or save that card id with customer info in your database to make future transactions
Note:
过去，我使用过 aspdotnetstorefront，但它是一个完整的店面应用程序，包括支付网关。
in the past, I have used aspdotnetstorefront, but it is an entire storefront application, including the payment gateway.
如果您不想使用 Pro，您可以使用 PayPal Express 来完成此操作。
https://www.paypal。 com/cgi-bin/webscr?cmd=xpt/Marketing/general/RecurringPaymentFAQs-outside#Q9
这是您正在寻找的内容还是您正在寻找使用其 API 的实际代码？
You can do this with PayPal Express if you don't want to use Pro.
https://www.paypal.com/cgi-bin/webscr?cmd=xpt/Marketing/general/RecurringPaymentFAQs-outside#Q9
Is that what you're looking for or are you looking for the actual code that uses their API?