Stripe Payment Changes (Stripe.js PCI Compliance Validation)

  • Hamlin Gordon
  • Hamlin Gordon's Avatar Topic Author
  • Offline
  • Senior Boarder
  • Senior Boarder
More
5 months 2 hours ago #113376 by Hamlin Gordon
Tuan, there is a note in my Stripe dashboard talking about PCI compliance and changes made by the PCI security standards council. see message below

Upgrade your integration for easier PCI compliance
We strongly recommend that you migrate your checkout flow to Stripe Elements, Checkout, one of our mobile libraries, or one of our partner platforms in order to minimize your PCI scope. If you upgrade, Stripe pre-fills your PCI documentation for you. With your current setup, you'll need to provide your own documentation in the next step.

my question to you is EB using stripe.js if yes do you plan and upgrading to stripe elements or Checkout to fulfill the new PCI Compliance requirements?

Please Log in or Create an account to join the conversation.

More
4 months 4 weeks ago #113379 by Tuan Pham Ngoc
Hi

Yes. Events Booking uses Stripe JS, not Stripe Elements yet. However, as it's required by Stripe, I think I will add support for it. Give me few more weeks, I will update you when it's implemented

Regards,

Tuan

Please Log in or Create an account to join the conversation.

More
2 months 1 week ago #116032 by Teresa
Hello Tuan,

Is there any update on using Stripe Elements for processing in the payment plugins? Stripe is insisting on it's use for easy PCI compliance.

Please Log in or Create an account to join the conversation.

More
2 months 1 week ago #116034 by Tuan Pham Ngoc
Hi Teresa

We actually have it supported sometime ago. You just need to download latest version of the payment plugin, update it to your site. Then click on os_stripe payment plugin to edit, set Use Stripe Element parameter to Yes and it should work as expected

Regards,

Tuan

Please Log in or Create an account to join the conversation.

More
1 month 4 weeks ago #116475 by Donal

Tuan Pham Ngoc wrote: We actually have it supported sometime ago. You just need to download latest version of the payment plugin, update it to your site. Then click on os_stripe payment plugin to edit, set Use Stripe Element parameter to Yes and it should work as expected


Hi Tuan, I've just updated to the latest version of the plugin (BTW: it's difficult to figure out with this plugin if an update is required or not as the version number is not shown on your site), and enabled Stripe Element, but the payment details field, i.e. the stripe element doesn't show on my checkout page, so registration is impossible

I have disabled it again, and my site is working normally again, but for easy PCI Compliance, I would like to get Stripe Elements working. Thanks for the help.

I have Joomla 3.8.11 and EB 3.6.0.

Thanks,
Donal

Please Log in or Create an account to join the conversation.

More
1 month 3 weeks ago #116489 by Tuan Pham Ngoc
Hi Donal

Stripe element option works very well. Maybe it doesn't work because you customized registration form (implemented using override) and that's why it doesn't work?

Try to check PATH_TO_TEMPLATE/html/com_eventbooking folder, if you see register folder there, try to rename that folder to something else and check it again. It should work fine

Regards,

Tuan

Please Log in or Create an account to join the conversation.

More
1 month 3 weeks ago #116497 by Donal
Thanks Tuan, that fixed the issue.

Just one question: The name of the card holder has been removed from the stripe payment form. Is cardholder name now not a necessary field?

I only ask because I have removed all personal info from the deposit completion page.

I have read the Stripe documentation, but its not specifically mentioned. I'm guessing that the name is no longer sent to Stripe for validation, but I'd love to hear confirmation from you.

Thanks,
Donal

Please Log in or Create an account to join the conversation.

More
1 month 3 weeks ago #116518 by Tuan Pham Ngoc
Hi Donal

Yes, you are correct. For some reasons, when we use Stripe Card Element, Stripe doesn't require Card Holder Name anymore

Just card number, expiration date, CVV code and zip code.

Tuan

Please Log in or Create an account to join the conversation.

More
1 month 3 weeks ago #116698 by Petter
Hi,

Is there a way to translate texts when using Stripe Card Element on a multilanguage site?

Rgds,

Petter

Please Log in or Create an account to join the conversation.

More
1 month 3 weeks ago #116699 by Tuan Pham Ngoc
Sadly, it's generated by Stripe and we don't have a way to change it

Tuan

Please Log in or Create an account to join the conversation.

Moderators: Tuan Pham Ngoc