How to include Credit Card info in admin mail ?

[ThePatch]

Yep, I just tested it on my own site, it does NOT email the cc #. It only emails the middle 8 digits. The first and last 4 and the cvv2 is stored in the db and displayed only in the admin panel

[kuroi]

That's correct Samuel. The security is that the two parts travel separately and never end up together, even in the same inbox, until the store administrator manually matches them up to process them, and even then they're not stored together (unless the store administrator does so - not recommended!)

[hubert]

But that was what I wanted to do, seting two different email adresses, one for the admin the other for the middle digits. But the admin mail doesn't include the first and last digits that's why I was asking how to include a part of CC infos in admin email.

Hubert

[ThePatch]

But that was what I wanted to do, seting two different email adresses, one for the admin the other for the middle digits. But the admin mail doesn't include the first and last digits that's why I was asking how to include a part of CC infos in admin email.

Hubert

Well, this already happens to a degree, it just doesn't email the first four\last four & cvv2; that's stored in the admin section of the order. Does it 'have' to be emailed?

[kobra]

hubert,

That procedure is not condoned for security/privacy issues but look at DrBytes post here and you can alter this

[trillian]

Is it possible to set it up where the entire CC number gets stored in the admin area, so that the store manager just gets a confirmation email and then can retrieve the card details in the admin area ?

This seems much easier than matching up the first and last four digits with the email containing the middle 8 digits.

Thanks,
-Sheryl

[kuroi]

I would recommend reading the Visa and Mastercard security policy with which you would have to comply to do this. It covers a wide range of server set-up and access requirements and even touches upon recruitment policy. Once you store whole credit card details in one place, the security requirements, and your obligations to demonstrate that you are complying with them, go through the roof.