Order Confirmation Email- Remove CC

[Kim]

And you don't want his because ...

As a consumer I do like to know which piece of plastic I used for which thing I bought so I can track the charges and refunds if needed.

[mtg169]

I am also looking to remove the credit card info from customer e-mail confirmation. I need to do it for some type of compliance as I was told we can't show more than 5 digits of a customer's credit card at any given time. I'd just like to remove it entirely, however I am not sure what file it is in.

[mtg169]

Nevermind. I was able to find it. It's in orders.php
Search for the function "send_order_email"

Comment out this section:

if (is_object($GLOBALS[$_SESSION['payment']])) {
$cc_num_display = (isset($this->info['cc_number']) && $this->info['cc_number'] != '') ? substr($this->info['cc_number'], 0, 4) . str_repeat('X', (strlen($this->info['cc_number']) - 8)) . substr($this->info['cc_number'], -4) . "\n\n" : '';
$email_order .= EMAIL_TEXT_PAYMENT_METHOD . "\n" .
EMAIL_SEPARATOR . "\n";
$payment_class = $_SESSION['payment'];
$email_order .= $GLOBALS[$payment_class]->title . "\n\n";
$email_order .= (isset($this->info['cc_type']) && $this->info['cc_type'] != '') ? $this->info['cc_type'] . ' ' . $cc_num_display . "\n\n" : '';
$email_order .= ($GLOBALS[$payment_class]->email_footer) ? $GLOBALS[$payment_class]->email_footer . "\n\n" : '';
} else {
$email_order .= EMAIL_TEXT_PAYMENT_METHOD . "\n" .
EMAIL_SEPARATOR . "\n";
$email_order .= PAYMENT_METHOD_GV . "\n\n";
}
$html_msg['PAYMENT_METHOD_TITLE'] = EMAIL_TEXT_PAYMENT_METHOD;
$html_msg['PAYMENT_METHOD_DETAIL'] = (is_object($GLOBALS[$_SESSION['payment']]) ? $GLOBALS[$payment_class]->title : PAYMENT_METHOD_GV );
$html_msg['PAYMENT_METHOD_FOOTER'] = (is_object($GLOBALS[$_SESSION['payment']]) && $GLOBALS[$payment_class]->email_footer != '') ? nl2br($GLOBALS[$payment_class]->email_footer) : (isset($this->info['cc_type']) && $this->info['cc_type'] != '' ? $this->info['cc_type'] . ' ' . $cc_num_display . "\n\n" : '');

[CobraPlant]

I also wanted to change the numbers provided in the confirmation email, but I didn't want to delete the entire command. If you take the first portion of the code mentioned in the previous post:

if (is_object($GLOBALS[$_SESSION['payment']])) {
$cc_num_display = (isset($this->info['cc_number']) && $this->info['cc_number'] != '') ? substr($this->info['cc_number'], 0, 4) . str_repeat('X', (strlen($this->info['cc_number']) - 8)) . substr($this->info['cc_number'], -4) . "\n\n" : '';

And replace it with this:

if (is_object($GLOBALS[$_SESSION['payment']])) {
$cc_num_display = (isset($this->info['cc_number']) && $this->info['cc_number'] != '') ? str_repeat('X', (strlen($this->info['cc_number']) - 4)) . substr($this->info['cc_number'], -4) . "\n\n" : '';

You'll end up with the following in your confirmation email:

XXXXXXXXXXXX1111

You can find the code in includes > classes > order.php. The code in question is near the end. Use the admin tool box to find the appropriate lines. I tested this out several times using 1.3.8a, and it's worked well so far. I prefer this method since you at least get the last four digits, but you hide the first four.