Zen Cart Logo
Forums / Fraud Prevention / Credit card page being cached?

Credit card page being cached?

Locked

Views: 75

Results 1 to 5 of 5
This thread is locked. New replies are disabled.
29 Nov 2009, 12:18 AM
#1
linnx avatar

linnx

Zen Follower

Join Date:
Jun 2009
Posts:
187
Plugin Contributions:
0

Credit card page being cached?

A customer told me the credit card (page that collects cc info) page allows caching.

How can the customer tell this and how can I fix it?

Thanks!

29 Nov 2009, 1:51 AM
#2
linnx avatar

linnx

Zen Follower

Join Date:
Jun 2009
Posts:
187
Plugin Contributions:
0

Re: Credit card page being cached?

To help clear things up, this is what the customer said happened. Apparently it was his second purchase and it remembered his card number. To which the customer says he does not have software in place to remember those details.


I saw that the form "remembered" my credit card number from my last transaction (for the record, it's not my browser -- I would never enable autocomplete. I'm running an older version of Chrome anyway).

I (obviously) don't really know anything about your app, but it appears that the order page isn't set to no-cache/output caching isn't set to OFF.

29 Nov 2009, 2:09 AM
#3
drbyte avatar

drbyte

Sensei

Join Date:
Jan 2004
Posts:
63,513
Plugin Contributions:
177

Re: Credit card page being cached?

Out-of-the-box, Zen Cart doesn't remember credit card details beyond just the page where they were entered, and it never re-displays full credit card numbers anywhere onscreen.

There are some addon payment gateway modules whose authors felt it desirable to remember cc details to re-display if you browse to other pages and come back again. If your addon is doing that, you are taking some risks which you should re-evaluate. However, this doesn't sound like what your customer is complaining about.

Additionally, since Zen Cart does NOT intentionally remember any cc details, that means that ALL such remembering is a result of your customer's browser. Regardless what they're telling you, it's their browser that's remembering their input. It's not necessarily the "autocomplete" setting that does that. It's probably remembering form data, whether it auto-completes re-entering the information for them or not. I suspect that the number appeared after they began typing the first few digits ... which means it's not autocomplete, but something else. (Autocomplete would automatically put the whole number in the box when the screen was drawn.)

So ... the customer's browser is remembering the details the customer entered on the webpage.
It's not your responsibility to fix that.

29 Nov 2009, 2:16 AM
#4
drbyte avatar

drbyte

Sensei

Join Date:
Jan 2004
Posts:
63,513
Plugin Contributions:
177

Re: Credit card page being cached?

If you wish to attempt to override your customers' browser settings, you could try altering the code that your payment module uses by customizing its form field output as discussed here: http://www.zen-cart.com/forum/showthread.php?t=83821

29 Nov 2009, 2:59 AM
#5
linnx avatar

linnx

Zen Follower

Join Date:
Jun 2009
Posts:
187
Plugin Contributions:
0

Re: Credit card page being cached?

Thanks for the info. I do not have any special credit card module, only the authorize.net that came out of the box....