Received Order Conf., but not e-mail with middle CC numbers

[Ken Joy]

I received the order confirmation e-mail today for an order, but not the e-mail containing the middle 8 credit card digits. These e-mails usually come in pairs, but today only received the one. This has been working fine until now.

Is there a way to retrieve those middle digits from anywhere within the bowels of ZenCart? I can't process the order without them.

Thanks!
Ken

[RobWUK]

i use the CEON manual card, and it definately does not store the cvv number anywhere nor the middle digits

what payment module are you using?

to be PCI complient you cannot store all the card details in the database

i had around 20 orders a whileback that had details missing, i had to contact each one


Rob

[RobWUK]

one thing to check is you email setting used on the payment module, if its incorrect you could create an email account with the misplelling and collect anything waiting or check you mailbox on your server that catches all see if anything has bounced back to the server

rob

[Ken Joy]

Thanks, Rob for your quick reply.

Yah, I'm always careful to clear the CVV out after I've processed orders. My e-mail settings are correct, since I did get the order confirmation. ZenCart just didn't process and send the e-mail with the middle CC numbers. I guess I'll have to contact my customer and explain the problem. I can't ask them to place the order again because it may do the same thing.

Guess I'll place a few test orders myself and see what happens.

Thanks for the kind assistance! :)

Ken

[JSWeb]

Hi,

We used to have clients using the [CEON manual card] module and the most common cause for it not sending through the CVV info was their Configuration > Email Settings not being Correct.

Even if it is working, there is a chance that an email won't come through and that's a problem

-- Your only choice then is to call your client (sorry I lost your CC details!)
-- If/When you receive the detail, it means you are then holding someones full credit card details and really that is not good! (Certainly doesn't meet PCI standards)
-- Doesn't matter how much you trust yourself with those details, If your site is ever hacked and they see you are using that module, the first thing they will do is change the CEON Manual Email Addr and just wait for your next order. They will have the full CC details before you even notice it!

I've spoke with CEON about this module a number of time and even he thinks it's a bad idea to use (I believe its even stated in the readme notes).

Sorry for my rant, but we are currently helping our clients through PCI right now and such payment options which allow you to capture such personal details are a big no no.

Kind regards

JSWeb Team

[RobWUK]

JSWeb - its quite right what you say about not using offline payment methods as you can be open to hack, and its email option weakspot and to use payment gateways rather then this mod

however, i do have a different email address in mine, so if anyone did get access to my email, they dont have access to the email they will only get the order details. The CEON details are emailed to a completely different email address not connected with by domain.

If you are on shared hosting then i wouldn't even consider using the offline payment

Rob

[DrByte]

If you didn't get the middle digits, double-check that the email address inside your credit card module is correct.

Better yet, use a live gateway service instead of an insecure manual method.