Adding Information to Invoice Print Out (under payment method)

[VictoriaTG]

Is it possible to get the system to print the credit card number in its entirety, the credit card expiration date, and type of credit card under the Payment Method portion of the invoice? It makes life easier when reconciling our accounts to have this information available.

[met00]

you never want to store/print a complete CC number. EVER. In fact, a check with your processor may show that you have a legal liability if you do. In simple terms it's a bad idea... may I suggest that you ensure that CC numbers are always 1234XXXXXXXX1234 when stored, printed, etc.

[jpf]

Fully agreed - this will cause you MAJOR problems if at any point your site get scanned.

That is why ALL receipts from the Brick and morter stores and ATM etc... all use the 1234 **...** 5678 method.

(first 4 charaters is normally FIXED numbers assigned to a processor/master distributors)

Thus 1234 XXXX XXXX 5678 is quite secure as 8 (or more) charater is way too hard to guess (1 in 30,000,000 chance of a guess). Where as the first 4 and last 4 - like XXXX 1234 5678 XXXX unless you have some sort social enginering is impossable to figure our even what type of card/distributor and what process to use for figuring out the check digits...

You should have no problems reconciling with the last 4 digits - it is accurate to one in 30000 or more cards (most have check digit built in to the numbers - so in guessing many FULL number are invalid).


ONLY older outdated CREDIT CARD IMPRESSION have the full number...NOT secure as if you drop that little slip----anyone could use it (that is why the printed CVV number on the back was created for online / card not present transactions.)

IT IS NOT RECOMMENDED TO USE THE BUILT IN CC PAYMENT IN OSCOMMERCE OR OSCMAX due to the insecure nature of storing the full number. This may break a few regulations and rules of use (possably a few laws in areas.... ). It should only be used for testing only.


I did work for A MAJOR international retail / online / catalog company (a business going back to 1886) - they NEVER stored the full number and NONE of the expire info in there internal accounting systems. Everything is stored in there own separate operated credit processor - which is backed/processed by Barclays.

In short - on invoices storing and recipts - the ONLY thing that should be showing is the first and last part of the card number - no expire info at all as well!...