Can middle credit card numbers be e-mailed to 2 addresses?

[tracib]

I found a previous thread about this, and the suggestion was to set up a forwarding address. My concern about doing that is the same as the other person--if the e-mail didn't go through, then it couldn't be forwarded, so that wouldn't help.

I just opened up my zen store, and I didn't receive one of the e-mails with the middle CC numbers (1 out of 3 credit card orders).

In the Admin->Modules->Payment->Credit Card-Offline Processing, is there a way to put 2 e-mail addresses in like you can do in the configuration->e-mail options?

I tried, but would get an error. I just want to be sure this doesn't happen again, that I don't receive the middle digits. I called my host about it, and they don't know why it happened. I have my e-mail info set up correctly for their server.

I don't get a lot of credit card orders, so processing offline is my best option at this time.

Thanks!

[schoolboy]

The key issue is security - it's already "vulnerable" having even parts of c-card data e-mailed, so the objective is to minimise the risk.

No method of data transport is 100% reliable, so it is important that the email address you choose to use resides with a host that has a reputation for good up-time.

On the rare occasions where the e-mail may not be received, you can always telephone the customer to confirm details...

...and if you don't get the e-mail, investigate (with the host service) why this may be happening.

[IridiumCorpSupport]

Can middle credit card numbers be e-mailed to 2 addresses?

The answer is no. Even if you split the card number up it will still be stored in its entirety on your machine and possibly the mail server. If a compromise occurs it would just as simple for the intruder to reassemble the card details as you can.

[tracib]

Can middle credit card numbers be e-mailed to 2 addresses?

The answer is no. Even if you split the card number up it will still be stored in its entirety on your machine and possibly the mail server. If a compromise occurs it would just as simple for the intruder to reassemble the card details as you can.

It can't be stored in its entirety on a mail server--the middle digits are the only ones e-mailed, so the mail server would have no way of getting the other digits and info.

I have to reassemble the info from getting part of the info from my admin area, and the rest of the info from the e-mail.

At any rate, I'm having problems getting the e-mailed info that seems to have noting to do with my e-mail server--it seems to be a zen cart issue.

[tracib]

The key issue is security - it's already "vulnerable" having even parts of c-card data e-mailed, so the objective is to minimise the risk.

No method of data transport is 100% reliable, so it is important that the email address you choose to use resides with a host that has a reputation for good up-time.

On the rare occasions where the e-mail may not be received, you can always telephone the customer to confirm details...

...and if you don't get the e-mail, investigate (with the host service) why this may be happening.

I just found out I got another order that not only did I not get the e-mail with the middle digits, I also didn't get the order confirmation or the customer account info. I have the order & customer info going to a different e-mail address (using a different web host) than the credit card info. So it's not a mail issue. It appears to be a zen cart issue, but I have everything set up according to the instructions, and I have gotten SOME of the orders. So I'm not sure what to do.

It doesn't make the customer feel like their info is very secure if I have to call them to ask for the middle digits because they got lost.

Any ideas? At this point I'm more concerned with getting the problem fixed so I'm receiving the e-mails with all of the info rather than setting it up for 2 e-mail addresses.

[DrByte]

So, you're really saying that you're having problems with emails getting delivered?

Troubleshooting Email: http://www.zen-cart.com/wiki/index.p...Email_Problems

[tracib]

So, you're really saying that you're having problems with emails getting delivered?

Troubleshooting Email: http://www.zen-cart.com/wiki/index.p...Email_Problems

Thanks, I had already read that. My host gave SMTP info, but their site says the operating system is Linux. So, I changed my transport method from SMTP to sendmail. That has helped, but it is still hit and miss on whether I get the order confirmations and extra CC numbers.

[DrByte]

On a linux host, you can use any of the methods. In most cases, if they've configured their server properly, the "PHP" method is the most reliable, with sendmail being a last resort in most cases.

You can use SMTP or SMTPAUTH with pretty much any host ... you just have to specify all the SMTP settings at the bottom of the email-settings screen ... and often the mailserver host name is "localhost" ... or even mail.your_domain.com


Also in the FAQ article is a reference to the email archive manager ... which lets you see whether Zen Cart sent the emails out or not ... and (apart from CC middle-digits and password-resets ... neither of which ever get archived, for security reasons), if the email exists in the archive, then the mailserver didn't reject it ... and thus any failure to deliver is a result of problems existing "after" the mailserver grabs it. This could include blacklisting of your server's address, etc.

[tracib]

On a linux host, you can use any of the methods. In most cases, if they've configured their server properly, the "PHP" method is the most reliable, with sendmail being a last resort in most cases.

You can use SMTP or SMTPAUTH with pretty much any host ... you just have to specify all the SMTP settings at the bottom of the email-settings screen ... and often the mailserver host name is "localhost" ... or even mail.your_domain.com


Also in the FAQ article is a reference to the email archive manager ... which lets you see whether Zen Cart sent the emails out or not ... and (apart from CC middle-digits and password-resets ... neither of which ever get archived, for security reasons), if the email exists in the archive, then the mailserver didn't reject it ... and thus any failure to deliver is a result of problems existing "after" the mailserver grabs it. This could include blacklisting of your server's address, etc.

Thanks for your help. I changed it to PHP and it seems to be working better. I'll download the e-mail archive manager module so I can keep an eye on things that way. When I first had it set up as SMTP, I did have the SMTP settings filled in at the bottom. But, maybe this has fixed it. Thanks!

[tracib]

Now I'm not getting any e-mails generated from my shopping cart. It worked fine last night, and now nothing.

Wait, I was able to get an e-mail sent from "contact us". But I haven't gotten the order e-mails, or new customer e-mails.