Do not know about your code but you need to educate yourself about PCI Compliance.
This is basically the major CC companies rules to be able to process CC's and protecting the information.
As sending complete credit card information over unsecure email that can be intercepted you would be in MAJOR violation.
Also if your customers knew that you were so lax about security they probably would not buy from you. Additionally, not taking measures to protect this data, if there were to be an instance where you were the source for information your insurance would most likely not cover you in the event you were fined and or procecuted.
Currently the default CC module splits the CC# and stores part in the DB and emails part to you - no complete details in any one location




