Credit Card Expiration Date Not Captured

3 Mar 2011, 9:26 PM

#1

New Zenner

Join Date:: Feb 2009
Posts:: 8
Plugin Contributions:: 0

Credit Card Expiration Date Not Captured

When I upgraded to 1.3.9h, credit card expiration dates stopped being captured and don't show up in the admin area or in the database. Has anyone had this problem or know how to fix it?

3 Mar 2011, 10:26 PM

#2

Kim

Obaa-san

Join Date:: Jun 2003
Location:: West Coast, North America
Posts:: 26,682
Plugin Contributions:: 0

Re: Credit Card Expiration Date Not Captured

What CC module are you using?

Please do not PM for support issues: a private solution doesn't benefit the community.

Be careful with unsolicited advice via email or PM - Make sure the person you are talking to is a reliable source.

19 Dec 2011, 5:12 PM

#3

cesaric

New Zenner

Join Date:: Dec 2011
Posts:: 1
Plugin Contributions:: 0

Re: Credit Card Expiration Date Not Captured

I was having the same problem when I upgraded to 1.39 but found the fix.

We're using Authorize.net payment module so this might not apply to all but in includes/modules/payment/authorizenet/authorizenet_aim.php on Line 282, you need to put back $order->info['cc_expires'] = $_POST['cc_expires'];

For whatever reason (maybe PCI), this value was commented out and set to a blank string.

19 Dec 2011, 6:08 PM

#4

drbyte

Sensei

Join Date:: Jan 2004
Posts:: 63,513
Plugin Contributions:: 176

Re: Credit Card Expiration Date Not Captured

Right. It's NOT supposed to be stored. You should comment that line out again. If you don't, be sure to call up your Authnet representative and tell them what you've done and why, so that they can increase your service fees to compensate for the increased risk you're creating by violating TOS.

.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole

Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.