We are currently using the manual credit card method.
So, we get two emails, with different portions of the credit card number. This seems pretty insecure.
Looking at the order.php file, it looks like there is a variable - cc_num_display. This kind of implies there is somewhere to turn of the sending of the first and last four digits? These can be retrieved in the admin order page.
Our merchant account, gateway does not have a zen cart module, so we are stuck with this manual method for now.
Version 1.3.8, with all the latest patches.
mark



