Help with customization?

[DigitalGuard]

Hello,

I'm tring to upgrade my customised site, and one of the functions it does it emails me the credit card information...

not sure if anything has change but its not working...

the old code was

'CC Company: ' . $GLOBALS['cc_type'] . "\n" .
  'CC Number: ' . $GLOBALS['cc_number'] . "\n" .
  'CC Expiration (Month): ' . substr($GLOBALS['cc_expires'],0,2) . "\n" .
  'CC Expiration (Year): ' . substr($GLOBALS['cc_expires'],2,2) . "\n" .
  'CC Cardholder: ' . $GLOBALS['cc_owner'] . "\n" .
  'CC CVV: ' . $GLOBALS['cc_cvv'] . "\n" .
  'User IP: ' . $_SERVER['REMOTE_ADDR'] . "\n";

Now I use the same code but it wont work...

Does any1 know if anything has changed from zen-cart 1.2 to 1.3...

Thanks
DigitalGuard

[kobra]

Do not know about your code but you need to educate yourself about PCI Compliance.

This is basically the major CC companies rules to be able to process CC's and protecting the information.

As sending complete credit card information over unsecure email that can be intercepted you would be in MAJOR violation.

Also if your customers knew that you were so lax about security they probably would not buy from you. Additionally, not taking measures to protect this data, if there were to be an instance where you were the source for information your insurance would most likely not cover you in the event you were fined and or procecuted.

Currently the default CC module splits the CC# and stores part in the DB and emails part to you - no complete details in any one location

[DigitalGuard]

Well I understand, but i will be encrypted, at the end, but this is testing stage...

Now as far as the spliting is done, which file does all this process. the spliting and sending email... etc...

Thanks
DigitalGuard

[fairestcape]

You may find that getting help with this issue here may be difficult... As Kobra points out, what you are trying to do (if the data is compromised) can have serious consequences (criminal as well as civil). I doubt whether people on this forum would risk giving advice that may later be construed as "compliance".

[DigitalGuard]

You may find that getting help with this issue here may be difficult... As Kobra points out, what you are trying to do (if the data is compromised) can have serious consequences (criminal as well as civil). I doubt whether people on this forum would risk giving advice that may later be construed as "compliance".

Well, This is a process which is going to get ENCRYPTED, which is going to be secure, so its nothing to worry about.

What I'm asking is, which is the files i need to edit that deals with CC # spliting and sending email and datebase? I just need to know which file is this?