Credit card numbers in split emails

We are currently using the manual credit card method.

So, we get two emails, with different portions of the credit card number. This seems pretty insecure.

Looking at the order.php file, it looks like there is a variable - cc_num_display. This kind of implies there is somewhere to turn of the sending of the first and last four digits? These can be retrieved in the admin order page.

Our merchant account, gateway does not have a zen cart module, so we are stuck with this manual method for now.

Version 1.3.8, with all the latest patches.

mark

Yes, remove this part from approx line 979:```
substr($this->info['cc_number'], 0, 4) .

Additionally, one would be prudent to use DIFFERENT email addresses for the different messages, right?

Better yet, use a live gateway. As you said, the email method is very insecure.

Worked like a charm, thank you very much.

mark