fine.

Undo all that, and add this around line 192:
Code:
    if (MODULE_PAYMENT_CC_COLLECT_CVV == 'True')  {
      $_POST['cc_cvv'] = preg_replace('/[^0-9.%]/', '', $_POST['cc_cvv']);
      if ((strlen($_POST['cc_cvv']) < CC_CVV_MIN_LENGTH) || ($cc_validation->cc_type == 'American Express' && strlen($_POST['cc_cvv']) < 4)) {
        $error .= ($error == '' ? '' : '<br />') . str_replace('\n', '', MODULE_PAYMENT_CC_TEXT_JS_CC_CVV);
        $result=0;
      }
    }
    /**
     *
     */
    if ( ($result == false) || ($result < 1) ) {
      $payment_error_return = 'payment_error=' . $this->code . '&cc_owner=' . urlencode($_POST['cc_owner']) . '&cc_expires_month=' . $_POST['cc_expires_month'] . '&cc_expires_year=' . $_POST['cc_expires_year'];
If you have that much fraud activity going on on your site, you should really be using a live gateway. And, you might consider targeting a different market ...