Arcadiauk Posted March 29, 2005 Share Posted March 29, 2005 I am just testing my company's new store and when I submit a test order the full credit card number is sent in the email. The order in the admin panel only shows the first & last 4 digits so that seems to be working OK. Has anyone else had this problem and resolved it? Any help greatfully received. Derek Quote Link to comment Share on other sites More sharing options...
Robert Lettan Posted March 29, 2005 Share Posted March 29, 2005 I would think it would only show first / last 4 digit, for security reasons. Sending the entire number via email is really something that helps contribute to Identity Theft. I mean just a warning, unless you enjoy being shown on Watchdog ;) Quote Link to comment Share on other sites More sharing options...
Arcadiauk Posted March 29, 2005 Author Share Posted March 29, 2005 (edited) I have resolved this problem, i'm surprised nobody else has had this problem before. I am using this contribution "Credit Card with CVV2" http://www.oscommerce.com/community/contributions,2954 I have compared the old cc.php file with the new updated one and found an error on line 178.... $message = 'Order #' . $insert_id . "\n\n" . 'Credit Card NO: ' . $ccu . "\n\n" . 'CVV2:: ' . $cvvu . "\n\n"; It should read.... $message = 'Order #' . $insert_id . "\n\n" . 'Credit Card NO: ' . $this->cc_middle . "\n\n" . 'CVV2:: ' . $cvvu . "\n\n"; $ccu was calling the full credit card number instead of the middle 8 numbers. It is now only sending the middle 8 numbers. Hopefully this might help anyone else who has come up against this problem. Derek Edited March 29, 2005 by Arcadiauk Quote Link to comment Share on other sites More sharing options...
Arcadiauk Posted March 29, 2005 Author Share Posted March 29, 2005 This is what I was trying to resolve. The email that was being generated was sending the whole number and not the middle 8 numbers as it should. As you can see from my post above it is now sorted. I was quite aware of the security problems with regard to sending the whole number by email which is why I needed it sorting as quick as possible. Derek I would think it would only show first / last 4 digit, for security reasons.Sending the entire number via email is really something that helps contribute to Identity Theft. I mean just a warning, unless you enjoy being shown on Watchdog ;) <{POST_SNAPBACK}> Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.