osCommerce and osCMax shopping cart software forums

Shopping Cart Software

osCommerce with teeth!

 

Credit Card number problems!

This is a discussion on Credit Card number problems! within the osCommerce 2.2 Modification Help forums, part of the osCommerce 2.2 Forums category; Hi, I have a question on the Extra Order Information. In the ADMIN section under catalog/admin/modules/payments/cc.php yo have a box ...


Go Back   osCommerce and osCMax shopping cart software forums > osCommerce 2.2 Forums > osCommerce 2.2 Modification Help

Register FAQ Members List Calendar Mark Forums Read


Free community membership! Fast easy FREE membership
Closed Thread

 

LinkBack Thread Tools
  #1  
Old 08-09-2004, 09:56 PM
New Member
 
Join Date: Sep 2003
Location: South Carolina
Posts: 11
Thanks: 0
Thanked 0 Times in 0 Posts
Rep Power: 0
bibleman
Default Credit Card number problems!

Hi,

I have a question on the Extra Order Information.

In the ADMIN section under catalog/admin/modules/payments/cc.php yo have a box where you can add an email for additional checkout information to be sent to whom ever you like.

This is the wording of the box: CC Split Credit Card E-Mail Address If an e-mail address is entered, the middle digits of the credit card number will be sent to the e-mail address (the outside digits are stored in the database with the middle digits censored)

I am using this feature to send myself the CVV number that is collected on my site in a separate email where the rest of the order information is not seen (for security purposes).

The problem is when you use this feature it also censors the middle 8 digits of the credit card information on the ADMIN section of the orders. So when you go to edit orders or copy the credit card information for punching into Quickbooks... it is missing the middle 8 digits.

So my question is: Can you turn off the command (wherever it is) that tells the "Extra Order Email" to "censor" out the middle digits of the Credit card information?

Thanks
Leon
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
  #2  
Old 08-10-2004, 09:52 AM
Active Member
 
Join Date: May 2003
Posts: 148
Thanks: 0
Thanked 1 Time in 1 Post
Rep Power: 0
Arpit
Default

well the line your looking for is:

Code:
 'field' => substr($this->cc_card_number, 0, 4) . str_repeat('X', (strlen($this->cc_card_number) - 8)) . substr($this->cc_card_number, -4)),
look under catalog/includes/modules/payment/cc.php around line # 137
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
  #3  
Old 08-11-2004, 06:31 AM
New Member
 
Join Date: Sep 2003
Location: South Carolina
Posts: 11
Thanks: 0
Thanked 0 Times in 0 Posts
Rep Power: 0
bibleman
Default

Quote:
Originally Posted by Arpit
well the line your looking for is:

Code:
 'field' => substr($this->cc_card_number, 0, 4) . str_repeat('X', (strlen($this->cc_card_number) - 8)) . substr($this->cc_card_number, -4)),
look under catalog/includes/modules/payment/cc.php around line # 137
Yes you are right.... there it is.

Do you know how to tell it to NOT X out the middle four numbers?
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
  #4  
Old 08-11-2004, 07:14 AM
michael_s's Avatar
osCMax Developer

 
Join Date: Jul 2002
Location: Phoenix, AZ
Posts: 10,331
Thanks: 68
Thanked 322 Times in 305 Posts
Rep Power: 10
michael_s has a reputation beyond reputemichael_s has a reputation beyond reputemichael_s has a reputation beyond reputemichael_s has a reputation beyond reputemichael_s has a reputation beyond reputemichael_s has a reputation beyond reputemichael_s has a reputation beyond reputemichael_s has a reputation beyond reputemichael_s has a reputation beyond reputemichael_s has a reputation beyond reputemichael_s has a reputation beyond repute
Default

It is a VERY BAD idea to do so. Since the CC is stored in plaintext in the DB, you want it obfuscated in some way. If you don't, you are liable for any damages that occur (and your merchant provider, if they find out, may pull your account on you.) Not to mention how easy it is to get into a database and harvest all the unencrypted cc numbers.
__________________
Michael Sasek
osCMax Developer


  • osCMax Templates - Hundreds of premium quality templates. New designs every month!

  • xShop for osCMax - Windows Based osCMax administration. Improved workflow, security, speed and convenience.

  • osCMax Hosting - From basic hosting to High Availability, Load Balanced arrays, the most experienced osCMax host.

  • osCMax Template Tutorial - Learn how to make your own custom templates and how to use the powerful features of the osCMax template system.
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
  #5  
Old 08-11-2004, 11:15 AM
Active Member
 
Join Date: May 2003
Posts: 148
Thanks: 0
Thanked 1 Time in 1 Post
Rep Power: 0
Arpit
Default

You got that right
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Closed Thread

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On

Similar Threads

Thread Thread Starter Forum Replies Last Post
Credit Card Verification Number gamerevolt osCMax v2 Customization/Mods 1 09-08-2006 10:29 AM
Credit Card problems lem osCMax v1.7 Installation 3 05-16-2006 01:50 PM
GPG with CVV2 and Blank GPG Email no credit Card Number? tmullins osCMax v2 Customization/Mods 1 12-26-2005 09:31 PM
Problems with Secure Credit Card - GPG nscmonkey osCommerce 2.2 Modification Help 4 07-09-2004 01:27 PM
Credit Card Number is invalid message!! Anonymous osCommerce 2.2 Installation Help 3 11-27-2002 01:54 PM


All times are GMT -8. The time now is 07:24 PM.


Powered by vBulletin®
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
SEO by vBSEO
http://www.oscmax.com/forums/
Copyright 2008 osCMax