Just to clarify, especially for other readers of this discussion: Modern versions of Zen Cart DO NOT STORE ANY CREDIT CARD NUMBERS, NOR PARTIAL MIDDLE DIGITS, and DOES NOT EMAIL CARD NUMBERS.
If you have that functionality on your site, then you're using a VERY old obsolete version of Zen Cart, or you've copied those dangerous module files from a very old non-pci-compliant version, or you're using an addon which has created the capability.
IT IS NOT (AND NEVER HAS BEEN) SAFE TO STORE OR EMAIL CREDIT CARD DETAILS. Doing that leaves you vulnerable to fraud and theft, and the related financial liabilities per the contract you've signed with your credit card processing service. Be sure you understand the risks you're taking!
.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole
Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.