The AIM module sends full credit card numbers in unencrypted, plain-text format straight into the ORDERS database table.

This very quick edit replaces the middle digits with XXXX's before it is inserted into the database.

This is a patch, NOT the full package.

More...