Clarification on security of Payment info

  • Resolved yevhenmarynych

    (@yevhenmarynych)


    3 years, 3 months ago

    Hi!
    I’m currently using Woocommerce + Stripe Gateway Plugin and I’m wondering if its secure enough to process customer`s payment data that comes through?

    What I`ve found so far. According to this doc:
    https://docs.woocommerce.com/document/woocommerce-security-faq/
    it says:

    “The payment gateway gives this sensitive information directly to the payment processor. We design our payment gateway plugins to ensure credit card data never enters or passes through your website’s database. This means you need not meet the burdensome and expensive security standards required for storing customers’ credit card numbers.”

    That is great. But I have input fields at my Checkout-page related to payment, such as Card Number, Expiry Date and CVC that user has to fill in to make a payment.

    My question is: what if browser crash at the moment when customer filled in all credit card data, but didn`t click on “Place Order” yet? Is there any temporary data (e.g. browser’s cache files) with user’s payment data that may be available for hackers due to browser crash?

    Thanks in advance,
    Yevhen

Viewing 1 replies (of 1 total)
  • Plugin Support Stuart Duff – a11n

    (@stuartduff)

    Automattic Happiness Engineer

    3 years, 3 months ago

    Hi @yevhenmarynych,

    Stripe is an offsite payment gateway where the card detail form input fields are served from Stripes own web servers themselves and not the WooCommerce plugin. If a browser crash occurred the customer would have to reload the checkout page of WooCommerce and enter their card details again as those would not be stored.

    WooCommerce also does not store any card details for customers in your site and those are stored on the Stripe website.

    This particular forum is for questions which are directly related to the features and functionality of the free WooCommerce plugin. It does not, however, offer support for questions related to any extensions or themes which can work with WooCommerce.

    For questions related to the free Stripe plugin you can ask those in the official support forum for that plugin which I’ve referenced below for you.

    https://wordpress.org/support/plugin/woocommerce-gateway-stripe/

Viewing 1 replies (of 1 total)
  • The topic ‘Clarification on security of Payment info’ is closed to new replies.