allan.casilum

Gain Commerce

The Gain Commerce NMI Payment Gateway for WooCommerce is the premier free NMI plugin for secure, flexible credit card processing on your WooCommerce store. This plugin offers easy integration into WooCommerce to create a seamless customer checkout experience. Achieve top-tier security with full PCI-DSS Compliance through the NMI payment gateway, utilizing Collect.js for safe data tokenization that keeps sensitive card data off your server.
Merchants gain essential features like the Authorize Now and Capture Later flexibility, easy refunds managed from the WooCommerce dashboard, and the ability to control accepted card types. The plugin also supports advanced features such as Dynamic Descriptors and records AVS/CVV response codes. Streamline your transaction management with a reliable, feature-rich gateway plugin from Gain Commerce.
Free Plugin Version Includes
<ul>
<li>Easy Integration into WooCommerce for a seamless customer checkout process. </li>
<li>Secure Payment Processing with full PCI-DSS Compliance via the NMI payment gateway.</li>
<li>Credit Card Processing managed entirely by NMI with data tokenization through <a href="https://docs.nmi.com/docs/collectjs/" rel="nofollow ugc">Collect.js</a> </li>
<li>Manage Transactions from the WooCommerce dashboard.</li>
<li>Customizable Settings in the WooCommerce admin.</li>
<li>Control Card Types to accept or restrict all major credit card brands, as needed.</li>
<li>Receipts from the WooCommerce dashboard through NMI.</li>
<li>Refunds from the WooCommerce dashboard.</li>
<li>AVS/CVV Response Codes recorded in order notes.</li>
<li>Dynamic Descriptors available for merchants requiring variable descriptors on customer statements.</li>
<li>Authorize Now and Capture Later flexibility for transactions occurring at a later date.</li>
<li>Shipping Info sent to NMI transaction ledger.</li>
<li>AVS/CVV Response Codes recorded in order notes.</li>
<li>Logging to detect and fix errors or issues.</li>
</ul>
Important Requirements:
<ul>
<li>Active NMI account</li>
<li>WooCommerce version 8.0 or higher.</li>
<li>WooCommerce HPOS (High-Performance Order Storage)</li>
<li>WordPress 6.8.*</li>
</ul>
Compatibility:
<ul>
<li>WooCommerce 8.0+ (HPOS only)</li>
<li>WordPress 6.8.*</li>
</ul>
<h3>Source Code</h3>
The source code for the minified JS/CSS is available at: 
<a href="https://github.com/apysais/gaincommerce-nmi-payment-gateway-for-woocommerce/" rel="nofollow ugc">Gain Commerce NMI Payment Gateway for WooCommerce</a>
Build instructions: 
1. Clone the repository. 
2. Run <code>npm install</code> to install dependencies. 
3. Run <code>npm run build</code> to generate production assets.
<h3>External Services</h3>
This plugin connects to the NMI payment gateway to process transactions.
<ul>
<li>Service: <a href="https://www.nmi.com/" rel="nofollow ugc">NMI Payment Gateway</a></li>
<li>Purpose: To process credit card payments securely.</li>
<li>Data Sent: Card details (via tokenization), order details.</li>
<li><a href="https://www.nmi.com/legal/terms/" rel="nofollow ugc">Terms of Service</a></li>
<li><a href="https://www.nmi.com/legal/privacy/" rel="nofollow ugc">Privacy Policy</a></li>
</ul>
When Data Is Sent: 
Data is transmitted only when a customer submits payment information during checkout.
Where Data Is Sent: 
All sensitive data is sent directly to NMI’s secure servers. Your website does not store or process raw payment data.
The plugin loads the NMI Collect.js script for tokenization:
<ul>
<li>Script URL: <a href="https://docs.nmi.com/docs/collectjs" rel="nofollow ugc">https://docs.nmi.com/docs/collectjs</a></li>
<li>Collect.js is a PCI-compliant JavaScript library provided by NMI to tokenize payment data in the browser before it reaches your server.</li>
</ul>
Conditions: 
Data is encrypted and tokenized using Collect.js. Only a single-use token is returned to your site for transaction processing.

Gain Commerce NMI Payment Gateway for WooCommerce

PCI-compliant payment gateway integration between NMI and WooCommerce. Seamlessly accept e-commerce credit card payments through WooCommerce stores.

PCI Vault

Securely <a href="https://docs.pcivault.io/developers/capturing-card-data/" rel="nofollow ugc">capture payment card data</a> from your site using PCI Vault. PCI Vault is a vendor neutral PCI DSS compliant environment designed to reduce your PCI compliance scope to a SAQ by using <a href="https://pcivault.io" rel="nofollow ugc">credit card tokenization</a>.
Data captured with this plugin will be sent to PCI Vault’s DSS compliant environment directly, and will not be present on your own server. This allows you to securely capture and <a href="https://pcivault.io" rel="nofollow ugc">tokenize credit card</a> data without being PCI DSS compliant.
<h4>How it Works</h4>
The plugin comes with a short code that loads PCI Vault’s own <a href="https://api.pcivault.io/pcd/how-to-capture-and-tokenize-payment-card-data.html" rel="nofollow ugc">Payment Card Data (PCD) form</a>, and makes all the necessary requests to the <a href="https://api.pcivault.io" rel="nofollow ugc">PCI Vault API</a> in order to get the form working. You can read more on the API side of things <a href="https://docs.pcivault.io/developers/capturing-card-data/" rel="nofollow ugc">here</a>.
Take note that this includes 2 paid API requests: 1 when the form loads, and 1 when the data is being sent to PCI Vault.
To use this plugin, add your authorisation details, and the user/passphrase for a key, in the PCI Vault Options menu. You can then load the capture form anywhere in your site by using the <code>pcivault_capture</code> shortcode.
<h4>Shortcode Attributes</h4>
All valid short code attributes are imported directly into the javascript that renders the form. The security of these attributes are the responsibility of the site, and not PCI Vault.
Every attribute must be a valid Javascript expression. We recommend to use function calls that return the values you want the attributes to have, this will grant extra flexibility and avoid issues with WordPress’s sanitisation.
The attribute options are:
<ul>
<li>success_callback: A JS function to call if the card was successfully stored.</li>
<li>error_callback: A JS function to call if the card was not successfully stored.</li>
<li>extra_data: Extra data to store along with the card, must be a valid JS object. This is where using a JS function call really helps.</li>
<li>show_card: A true/false value on whether or not to show the card on the form.</li>
<li>disable_luhn: A true/false value on whether to disable validation on all form fields.</li>
<li>force_keypad: A true/false value on whether to force the user to use a randomised on-screen keypad for entering card numbers. This helps to protect you from key-loggers.</li>
<li>field_options: A configuration object for specifying which of the form fields to show or validate.</li>
</ul>
For more information on these fields, please check the documentation for PCI Vault’s <a href="https://api.pcivault.io/pcd/how-to-capture-and-tokenize-payment-card-data.html" rel="nofollow ugc">Payment Card Data (PCD) form</a>.
<h4>PCI Vault</h4>
All of the magic behind this plugin happens on PCI Vault’s environment.
This plugin sends an authenticated request to PCI Vault, retrieving a <a href="https://docs.pcivault.io/developers/capturing-card-data/#step-1-create-a-unique-endpoint" rel="nofollow ugc">unique capturing endpoint</a>.
This request includes your authentication details, and the key/passphrase pair specified in the PCI Vault Options menu.
This plugin also loads a <a href="https://api.pcivault.io/pcd/how-to-capture-and-tokenize-payment-card-data.html" rel="nofollow ugc">hosted PCD form</a> from PCI Vault.
You need to be a customer of PCI Vault for this plugin to work. You can <a href="https://pcivault.io/#pricing" rel="nofollow ugc">view our pricing</a> and <a href="https://pcivault.io/register" rel="nofollow ugc">register an account</a>.
Also have a look at our <a href="https://pcivault.io/terms/" rel="nofollow ugc">Terms of Service</a> and our <a href="https://pcivault.io/privacy/" rel="nofollow ugc">Privacy Policy</a>.

PCI Vault Forms

Securely capture card data using PCI Vault, which is a vendor neutral PCI DSS compliant environment.

Gain Commerce NMI Payment Gateway for WooCommerce vs PCI Vault Forms