how to process credit card offline?

**developer_x** · 12-18-2004, 03:02 AM

hi,

i tested the credit card module with the test credit card no. i thought i will be able to view the credit card no in the orders section of admin panel. but i can't find any credit card no there. is it because i am using the dummy credit card no?
i want to get the creditfcard no, and then process it offline.

cheers,

**michael_s** · 12-18-2004, 06:18 AM

You should never ust the default CC module for real credit card transactions. It stores the number in the database in cleartext. If you insist on not using a real time or third party processor, which is dangerous, you should at least get the CC encryption module from the osCommerce contributions section.

None of the CC mods show the CC# in the admin, as this is completely insecure and far too easy to crack.

**developer_x** · 12-18-2004, 10:17 AM

Originally Posted by msasek

You should never ust the default CC module for real credit card transactions. It stores the number in the database in cleartext.

i know dat mate. but the thing is the client for whom i am making this store insists on processing the credit cards offline. i'll try my best to convince him.

If you insist on not using a real time or third party processor, which is dangerous, you should at least get the CC encryption module from the osCommerce contributions section.

oh yes. i came across that contribution recently. thanx for reminding me though.

None of the CC mods show the CC# in the admin, as this is completely insecure and far too easy to crack.

ok if the CC# is not shown in the admin. then how can the owner of the store process the card offline at his physical store?
do i need to extract each n every credit card no of each customer for him?

**michael_s** · 12-18-2004, 05:10 PM

Hi,

The encryption mod that I mentioned actually encrypts the order number and CC# and emails it to the address of your choice. Then the recipient must decrypt the mail, and can then process the card offline. For security reasons, only the order number and CC info are sent. You the match them up to the order email that comes separately with the user info.

I have used it on a half dozen client sites and it works quite nicely for offline processing.

**developer_x** · 12-19-2004, 02:20 PM

how can i decrypt the crypted CC# mailed to me? does the crypting module do dat do?

**developer_x** · 12-20-2004, 12:52 PM

Originally Posted by msasek

It stores the number in the database in cleartext.

oh oh. i had not read this earlier. so this means in the orders section, i get clear text instead of a real cc#. will i view the cc# if someone enters his/her real cc#? i hope so

If you insist on not using a real time or third party processor, which is dangerous, you should at least get the CC encryption module from the osCommerce contributions section.

my client is still insisting on not using any real time or 3rd party processor. i'm gonnna get that the enryptig module today.

None of the CC mods show the CC# in the admin, as this is completely insecure and far too easy to crack.

if none of cc mods show up in the admin panel, then how am i gonna process a credit card offline.

this issue is really becoming a headache for me.

regards,

**michael_s** · 12-20-2004, 03:20 PM

First - cleartext = un encrypted and easily stolen!

It is not as complicated as you are making this out to be. Use the cc encryption mod. It will email the encrypted cc# to you. Then you decrypt it and can process it.

The numbers are NOT stored in the DB, they are emailed to wherever you want, encrypted.

To answer you question about decrypting, no, the mod cannot decrypt it. It is only designed to encrypt and email for security reasons. Since you will be viewing it on your local computer in an email client, you will have to set up your email client to decrypt it.

I agree, it is a pain to do it this way instead of using a real time cc processor, which can be set up in minutes, but since your client wants to do things the hard way, you are really stuck...

**developer_x** · 12-22-2004, 02:24 PM

well everything is crystal clear now. thanx.

**ksl8313** · 02-03-2005, 10:40 PM

I agree, it is a pain to do it this way instead of using a real time cc processor, which can be set up in minutes, but since your client wants to do things the hard way, you are really stuck...

What third party real-time cc processor can I use / would you recommend for use with osCommerce?

**shebangs** · 03-06-2005, 09:17 PM

For offline/manual credit card
what you are looking for is this add on module from oscommerce that works well with oscdox as i am using it on 3 websites no hassles - ignore the fact that is says uk, as im not based in the uk, it just has extra cards available that are probably uk issued, but you can enable and disable the type of credit cards you want to accept in the admin panel.
what this module does is it adds the CVV requirement in the credit card payment form which is essential if you are processing your own card
and then it lets you store the credit card info in your data base - so when you click on your client you can see his full cc info - for security options it lets you break down the cc number as an option -where it will send the middle part of the cc card number to an email you specify - it also lets you install a delete button so you can delete the info if you dont need it any more - the module can be found here:
CC_CVV+UK Switch v1.0
http://www.oscommerce.com/community/...all/search,cvv