Quote Originally Posted by lolwaut View Post
@carlwhat For this to be implemented properly, the checkout submit process would need to ignore that field. This might be more complicated than I initially thought. Does your plugin address this?
Best asked in the support thread for the mod.



Quote Originally Posted by lat9 View Post
That clearing of the credit-card fields, IIRC, was a PCI-compliance-related change. What I will look into is the possibility of clearing only the CVV number field, so that all the information doesn't need to be re-entered.
I have found that the more you leave in the forms, the easier it is for the spammers to try to get their stolen cards to work. With just the CVV, all they need do is 999 checks (9,999 for AE) to see which one works. The Zip would be 99,999 which is still doable for the hacker. Turn both off and they will probably bother someone else. And, they will spread the word that you have created a testing ground.

It's always a delicate balance between convenience and security.