The answer is recurring billing is quite a taboo in the e-commerce industry. This is mostly because the big boys, i.e. Mastercard and Visa have very strict rules governing recurring billing transactions.
Recurring billing means storing a customer's credit/debit card data, long number, expiry, and cvv2, for future processing. However, this opens up a huge can of worms in terms of security. This is why Visa/Mastercard impose rules on merchants in becoming PCIDSS compliant. Practically this means your server/website have to be certified to be secure, using a service like McAfee PCIDSS, which basically scans your server/website remotely and attempts to break it. It looks for open ports, badly configured firewall (or lack of), xss scripting flaws, mysql injection breaches, operating system security breaches, and many more. One of the most important elements with PCIDSS is having all card data encrypted.
It is a laborious process, since once you are given a report, you are also expected to repair all flagged critical issues and pass the scan. There are other steps to complete, but I shan't enumerate them all here. See the pci dss website for reference. You are also expected to keep the certification up-to-date on a quarterly basis.
Basically what this means is that Visa/Mastercard don't particularly like the smaller merchants to have this feature, as they can be of major risk to clients. If their system is breached, hackers could use the card data for criminal enterprises.
This in turn means Visa/Mastercard favor the big players in the industry to handle recurring billing, such as PayPal, Worldpay, authorize.net, etc. One port of call, one entity to fine and recover losses if there's a problem.
And now we return to Magento. Whilst it is relatively easy to create a normal payment method in Magento, since most PSPs work in the same manner [mostly], recurring billing is handled differently from provider to provider. Furthermore, some are more restrictive than others.
I can't and won't recommend PayPal as I have had extremely bad experiences with them, I can definitely recommend Worldpay + Futurepay + Invisible XML method. You would need to hire a Magento developer to write a custom module for you, but it's doable. I am currently writing a module for a client in Norway using a norwegian payment method and recurring billing.
If you still need help, get in touch, I can write a module for your store.
Paradox Labs has an Authorize.NET CIM extension that supports Magento Recurring Profiles and Braintree recently released an extension that also supports them. I have made lots of improvements to Magento's recurring profiles. You can definitely tell they are in beta form, but that should stop you from getting your hands dirty and finishing things that the Magento team hasn't got to yet.
I'm had to make modifications to the cart controller to allow discount codes to display on the frontend when used on nominal items. By default they wouldn't display that they were applied.
I also had to make some modifications to the daily billing job that runs to remove the discounts the second time the profile is billed. Magento was applying them each time it reached the end of cycle.
Lots of little things here and there, but it's getting there.
There are different strategies to implement recurring billing / product subscriptions with Magento:
Magento Recurring Profiles
Magento's built in recurring profiles feature can be used with compatible Magento payment extensions and gateways. These include PayPal, Authorize.Net CIM (Customer Information Manager). A payment extension which supports the recurring profiles feature is required for this approach, for example Paradox Labs CIM Extension.
Customize Magento to Support Recurring Billing
This can be done with a third party extension, like the (AheadWorks SARP extension) or developed from scratch.
发布评论
评论（4）
答案是，循环计费在电子商务行业是一个相当大的禁忌。这主要是因为万事达卡和维萨卡等大公司对定期计费交易有非常严格的规则。
定期计费意味着存储客户的信用卡/借记卡数据、长号、到期日和 cvv2，以供将来处理。然而，这在安全性方面带来了巨大的麻烦。这就是 Visa/Mastercard 对商家制定 PCIDSS 合规规则的原因。实际上，这意味着您的服务器/网站必须使用 McAfee PCIDSS 等服务进行安全认证，该服务基本上会远程扫描您的服务器/网站并尝试破坏它。它会查找开放端口、防火墙配置不当（或缺乏）、xss 脚本缺陷、mysql 注入漏洞、操作系统安全漏洞等等。 PCIDSS 最重要的要素之一是对所有卡数据进行加密。
这是一个费力的过程，因为一旦您收到报告，您还需要修复所有标记的关键问题并通过扫描。还有其他步骤需要完成，但我不会在这里一一列举。请参阅 PCI DSS 网站以供参考。您还应该每季度更新一次认证。
基本上，这意味着维萨/万事达卡并不特别喜欢小型商户拥有此功能，因为它们可能会给客户带来重大风险。如果他们的系统遭到破坏，黑客就可以将卡数据用于犯罪企业。
这反过来意味着 Visa/Mastercard 更倾向于行业内的大公司来处理经常性账单，例如 PayPal、Worldpay、authorize.net 等。出现问题时，一个停靠点、一个实体即可罚款并挽回损失。
现在我们回到 Magento。虽然在 Magento 中创建正常的支付方式相对容易，但由于大多数 PSP 的工作方式[大部分]相同，因此不同提供商对定期计费的处理方式有所不同。此外，有些比其他的限制更严格。
我不能也不会推荐 PayPal，因为我在他们那里有过非常糟糕的经历，我绝对可以推荐 Worldpay + Futurepay + Invisible XML 方法。您需要聘请 Magento 开发人员为您编写自定义模块，但这是可行的。我目前正在为挪威的客户编写一个模块，使用挪威付款方式和定期计费。
如果您仍然需要帮助，请与我们联系，我可以为您的商店编写一个模块。
希望这有帮助。
干杯，
迈克尔.
The answer is recurring billing is quite a taboo in the e-commerce industry. This is mostly because the big boys, i.e. Mastercard and Visa have very strict rules governing recurring billing transactions.
Recurring billing means storing a customer's credit/debit card data, long number, expiry, and cvv2, for future processing. However, this opens up a huge can of worms in terms of security. This is why Visa/Mastercard impose rules on merchants in becoming PCIDSS compliant. Practically this means your server/website have to be certified to be secure, using a service like McAfee PCIDSS, which basically scans your server/website remotely and attempts to break it. It looks for open ports, badly configured firewall (or lack of), xss scripting flaws, mysql injection breaches, operating system security breaches, and many more. One of the most important elements with PCIDSS is having all card data encrypted.
It is a laborious process, since once you are given a report, you are also expected to repair all flagged critical issues and pass the scan. There are other steps to complete, but I shan't enumerate them all here. See the pci dss website for reference. You are also expected to keep the certification up-to-date on a quarterly basis.
Basically what this means is that Visa/Mastercard don't particularly like the smaller merchants to have this feature, as they can be of major risk to clients. If their system is breached, hackers could use the card data for criminal enterprises.
This in turn means Visa/Mastercard favor the big players in the industry to handle recurring billing, such as PayPal, Worldpay, authorize.net, etc. One port of call, one entity to fine and recover losses if there's a problem.
And now we return to Magento. Whilst it is relatively easy to create a normal payment method in Magento, since most PSPs work in the same manner [mostly], recurring billing is handled differently from provider to provider. Furthermore, some are more restrictive than others.
I can't and won't recommend PayPal as I have had extremely bad experiences with them, I can definitely recommend Worldpay + Futurepay + Invisible XML method. You would need to hire a Magento developer to write a custom module for you, but it's doable. I am currently writing a module for a client in Norway using a norwegian payment method and recurring billing.
If you still need help, get in touch, I can write a module for your store.
Hope this helps.
Cheers,
Michael.
Paradox Labs 有一个 Authorize.NET CIM 扩展，支持 Magento Recurring Profiles，Braintree 最近发布了一个也支持它们的扩展。我对 Magento 的重复配置文件做了很多改进。您绝对可以看出它们处于测试版形式，但这应该可以防止您亲自动手完成 Magento 团队尚未完成的事情。
以下是我改进的一些内容：
https://github.com/tegansnyder/Magento-Recurring-Beta-网格改进
https://github.com/tegansnyder/Magento-Programmatically-Create-Recurring-Profiles- Authorize.net-CIM
https://gist.github.com/tegansnyder
我必须对购物车控制器进行修改，以允许折扣代码在用于名义商品时显示在前端。默认情况下，它们不会显示它们已被应用。
我还必须对运行的每日计费作业进行一些修改，以在第二次对配置文件计费时删除折扣。 Magento 每次到达周期结束时都会应用它们。
到处都有很多小事，但它正在到达那里。
Paradox Labs has an Authorize.NET CIM extension that supports Magento Recurring Profiles and Braintree recently released an extension that also supports them. I have made lots of improvements to Magento's recurring profiles. You can definitely tell they are in beta form, but that should stop you from getting your hands dirty and finishing things that the Magento team hasn't got to yet.
Here are a few things I improved:
https://github.com/tegansnyder/Magento-Recurring-Beta-Grid-Improvements
https://github.com/tegansnyder/Magento-Programmatically-Create-Recurring-Profiles-Authorize.net-CIM
https://gist.github.com/tegansnyder
I'm had to make modifications to the cart controller to allow discount codes to display on the frontend when used on nominal items. By default they wouldn't display that they were applied.
I also had to make some modifications to the daily billing job that runs to remove the discounts the second time the profile is billed. Magento was applying them each time it reached the end of cycle.
Lots of little things here and there, but it's getting there.
您应该查看服务 OrderGroove.com。他们专注于 Magento 等电子商务系统中的重复订单。
You should look at the service OrderGroove.com. They specialize in recurring orders in e-commerce systems like Magento.
使用 Magento 实现定期计费/产品订阅有不同的策略：
Magento 定期配置文件
Magento 的内置定期配置文件功能可与兼容的 Magento 支付扩展程序和网关一起使用。其中包括 PayPal、Authorize.Net CIM（客户信息管理器）。此方法需要支持定期配置文件功能的付款扩展，例如 Paradox Labs CIM 扩展。
自定义 Magento 以支持定期计费
这可以通过第三方扩展来完成，例如 (AheadWorks SARP 扩展）或从头开始开发。
集成外部订阅管理软件
专门从事电子商务产品订阅的平台包括：
一些数字商品订阅管理软件包括：
There are different strategies to implement recurring billing / product subscriptions with Magento:
Magento Recurring Profiles
Magento's built in recurring profiles feature can be used with compatible Magento payment extensions and gateways. These include PayPal, Authorize.Net CIM (Customer Information Manager). A payment extension which supports the recurring profiles feature is required for this approach, for example Paradox Labs CIM Extension.
Customize Magento to Support Recurring Billing
This can be done with a third party extension, like the (AheadWorks SARP extension) or developed from scratch.
Integrate External Subscription Management Software
Platforms which specialize in eCommerce product subscriptions include:
Some subscription management software for digital goods includes: