Customers forget to enter their credit cards

I'm using the latest version of zen-cart 1.3.5 on my site. I've had lots of orders already. What can I do to prevent customers from being able to place their order without a credit card number.

I've had a few people order something and be able to get thru the order process without entering their number. So then I have to contact them and tell them they forgot.

Credit cards are the only method of payment that I accept on my site.

Any ideas how to prevent this?

Which payment module are you using?

This does not make sense. Please post the store location. Did you customize, (or do any "customisation", for those oxford fans:lol: ) the CC module in any way?

DrByte:

Which payment module are you using?

I'm using the Credit Card module. Partial credit card numbers are sent to me in two separate email messages. Then I process the credit cards manually.

The website is http://www.touchoffinland.com

and also

http://www.bboscodesigns.com

dlaitila:

I'm using the Credit Card module. Partial credit card numbers are sent to me in two separate email messages. Then I process the credit cards manually.
That module already requires the customer to enter a CC number in order to complete checkout. Without a number, an error occurs and they are taken back to the payment-choices page.

What version of PHP is on your server?
What contributions/addons do you have installed ?
Did you upgrade from a prior version, or was this installed directly as 1.3.5 ?

PHP Version: 4.3.3RC1 (Zend: 1.3.0)
Database: MySQL 4.0.13
Apache

modules addes:
Database backup
ezpopulate
subscription manager

Zen Cart 1.3.5
Database Patch Level: 1.3.5
v1.3.0.2 [2006-08-23 12:04:53] (Version Update 1.3.0.1->1.3.0.2)
v1.3.0.1 [2006-08-23 12:04:53] (Version Update 1.3.0->1.3.0.1)
v1.3.0 [2006-08-23 12:04:53] (Version Update 1.2.7->1.3.0)
v1.2.7 [2006-08-23 12:04:52] (Version Update 1.2.6->1.2.7)
v1.2.6 [2006-01-26 15:41:40] (Fresh Installation)

"Partial credit card numbers are sent to me in two separate email messages. "
Wait a minute. What CC module sends two separate email message?
I went your bbosco store and could not continue with a bad cc number.

"Credit cards are the only method of payment that I accept on my site"
Wait a minute. You are also using paypal?

Yes- you are correct on bbosco store, there are credit cards and paypal. On touchoffinland, it is only mastercard and visa (no paypal).

I wrote it incorrectly above that the owner is sent two separate email messages with the credit card information. I have it so the admin section shows part of the credit card like this
4111 XXXX XXXX 1111. The owner is sent via email a message with the missing numbers represented by the X's shown. The owner then combines the numbers and processes the credit card.

In the payment module....

Collect & store the CVV number
Do you want to collect the CVV number. Note: If you do the CVV number will be stored in the database in an encoded format.

True
selected False

Store the Credit Card Number
Do you want to store the Credit Card Number. Note: The Credit Card Number will be stored unenecrypted, and as such may represent a security problem

selected - True
False

Split Credit Card E-Mail Address
If an e-mail address is entered, the middle digits of the credit card number will be sent to the e-mail address (the outside digits are stored in the database with the middle digits censored)

How can I fix it so that the customer can not check out without entering a credit card number?

I have 3 other zen-cart sites where this is happening.

Im still missing something?

1. I went to http://www.touchoffinland.com/
2. Created an account
3. put a book in the shopping account
4. selected shipping
5. left the CC number blank
6. Continue to Step 3

I got the message stating that errors have occurred, please enter at least 10 digits for the CC number

Please confirm you have followed the exact steps above and you get the same error. Or change the steps above to meet how the checkout without a CC.

Bump for having the same problem, although I think OP has it slightly incorrect, it's not happening in the way he's describing.

They ARE putting in the CC information, but for some reason it gets lost, it never shows in the DB (fields are blank) and the email. No CC#, Date, Type, anything.

What payment module(s) are you using?
If the order shows in admin, what payment module shows for the sale missing data at Customers>Orders>Edit (sale missing data)?

I'm seeing the same problem on our site. We are running the most recent rev of 1.2 We haven't had time to upgrade to the latest version and not going to do it during the Holiday Season.

With no changes to the system configuration, one day it was working the next it was not. We are using the simple credit card add-on where it sends the middle digits via e-mail.

Any ideas here would be appreciated. Have we been hacked?

I found out the problem. We were hacked.

The offender added his e-mail address to the end of the recipient's list and turned of saving the credit card information in the database. 5 credit card numbers were compromised. The PayPal add-in also stopped working so we turned off all payment methods for now. We are a small site so luckily not to many people were impacted and contacting people for payment information will not be a big deal as we contact customers anyway.

I'm expecting that one of the pages is subject to SQL Injection allowing this person to update the appropriate field in the database. My concern is will they use this to re-enable the payment add on.

This is a huge deal and I'm guessing the the upgrade needs to come sooner rather than later.

We have discovered that the owners of the sites that are loosing the middle credit card numbers use AOL for their ISP. The other zen-cart sites that we do, don't have this problem because they are not with AOL. One of our clients has his store email going to Yahoo mail and once in a while, he has the middle numbers not show up in the email message too. Even those that use a Netscape email address might be going through AOL as their Internet Provider ISP.

They get the email message, it's just that the middle numbers for the credit card don't appear in the message.

To get around this, we have created other email accounts and have them login via web mail to get their middle numbers via email.

Ah ha! Thank you for the update. Now if we could just figure out why this is happening.

Change the subject and text in the message to be more like the welcome and order info emails. Maybe AOL will then let them through. My sister left AOL several years ago when one of here friends call and asked why she never replied to a letter. Sis called AOL and found that at AOL's digression they will delete emails instead of marking them as spam.
If they stay with AOL then can get there store IP whitelisted at: http://postmaster.aol.com/