Credit Card number problems!

[bibleman]

Hi,

I have a question on the Extra Order Information.

In the ADMIN section under catalog/admin/modules/payments/cc.php yo have a box where you can add an email for additional checkout information to be sent to whom ever you like.

This is the wording of the box: CC Split Credit Card E-Mail Address If an e-mail address is entered, the middle digits of the credit card number will be sent to the e-mail address (the outside digits are stored in the database with the middle digits censored)

I am using this feature to send myself the CVV number that is collected on my site in a separate email where the rest of the order information is not seen (for security purposes).

The problem is when you use this feature it also censors the middle 8 digits of the credit card information on the ADMIN section of the orders. So when you go to edit orders or copy the credit card information for punching into Quickbooks... it is missing the middle 8 digits.

So my question is: Can you turn off the command (wherever it is) that tells the "Extra Order Email" to "censor" out the middle digits of the Credit card information?

Thanks
Leon

[Arpit]

well the line your looking for is:

 'field' => substr($this->cc_card_number, 0, 4) . str_repeat('X', (strlen($this->cc_card_number) - 8)) . substr($this->cc_card_number, -4)),

look under catalog/includes/modules/payment/cc.php around line # 137

[bibleman]

Originally Posted by Arpit

well the line your looking for is:

 'field' => substr($this->cc_card_number, 0, 4) . str_repeat('X', (strlen($this->cc_card_number) - 8)) . substr($this->cc_card_number, -4)),

look under catalog/includes/modules/payment/cc.php around line # 137

Yes you are right.... there it is.

Do you know how to tell it to NOT X out the middle four numbers?

[michael_s]

It is a VERY BAD idea to do so. Since the CC is stored in plaintext in the DB, you want it obfuscated in some way. If you don't, you are liable for any damages that occur (and your merchant provider, if they find out, may pull your account on you.) Not to mention how easy it is to get into a database and harvest all the unencrypted cc numbers.

[Arpit]

You got that right