How to include Credit Card info in admin mail ?

Can someone help me,

I've a bit customized my html email sent to the admin and I would like it to include
Credit Card Type:
Credit Card Owner:
Credit Card Number:
Credit Card CVV Number:
Credit Card Expires:

But I don't know what is the code to use nor where to put it so that I can include these infos in my custom email_template_checkout.html

Thanks for help

Regards

Hubert

Since sending the information the way you are requesting could get your merchant account yanked and you in court at the defendants table I wouldnt.

you can however use the cc split in which 1/2 of the number is emailed to you along with the cvv and the other 1/2 and the exp date are available in the ZC admin.....

Merlinpa1969:

you can however use the cc split in which 1/2 of the number is emailed to you along with the cvv and the other 1/2 and the exp date are available in the ZC admin.....

OK, no prob for having only half of the CC number and CVV in the admin mail, but how to do it ? Wich code to use ? and where to paste it ?

Hubert

I read some threads saying that credit card details are sent in the mail to the admin, while middle digits are sent to another mail address. The middle digits are sent to a special address but not the rest of CC details in the admin email.

I'm digging into files to find the answer, I've found that lines 330 to 334 of order.php are commented. These lines talks about credit card, but uncommenting them doesn't do the trick.

Can someone help me including CC details in the mail received by admin on each confirmed order.

Thanks

Hubert

This is only for the "Credit Card" modue in the admin > modules > payment > Credit Card

There select edit and you can select the Split Credit Card E-Mail Address and provide an email address for this to be sent to

Hello Hubert,
I just tried the CC module myself a few days ago. The truncated card number is stored on the order section of the cart. The missing numbers are emailed to the email address you specify. This helps keep everything separate and you a little safe.

The only thing that is technically in violation of TOS with a lot of credit card processors is the storing of CVV2 data. I know and understand 'why' ZenCart offers this as if you are going to be keying in said card information you will typically be prompted for this data. It does not effect the rate you're charged if you're on a tiered structure but it's nice to have that added level of security.

That's a tough choice.

Hubert,

Another consideration is that you and especially your customers do not want their full CC details being emailed over unsecure connections that most email is on.

The FAQ documentation for the basic Credit Card module can be found here:
https://www.zen-cart.com/tutorials/index.php?article=67
This should answer the various questions raised earlier, except for how to rewrite code to send additional information in the emails.

You can alter the send_order_email() method in the order class to include additional information if you desire.
However, due to the nature of PCI issues etc, I will not be posting "how" exactly to do this, as it really should not be done.

If your customers knew you were emailing their credit card information, they should stop doing business with you.

OK, OK, OKey !

So even sending half info to one address and the other half to the other is not a good idea.

Thanks

Hubert

Well, does it really "email" the cc number? I know it emails the middle 8 digits but does it email the other? I was thinking it just wrote the data to the database?

Yep, I just tested it on my own site, it does NOT email the cc #. It only emails the middle 8 digits. The first and last 4 and the cvv2 is stored in the db and displayed only in the admin panel

That's correct Samuel. The security is that the two parts travel separately and never end up together, even in the same inbox, until the store administrator manually matches them up to process them, and even then they're not stored together (unless the store administrator does so - not recommended!)

But that was what I wanted to do, seting two different email adresses, one for the admin the other for the middle digits. But the admin mail doesn't include the first and last digits that's why I was asking how to include a part of CC infos in admin email.

Hubert

hubert:

But that was what I wanted to do, seting two different email adresses, one for the admin the other for the middle digits. But the admin mail doesn't include the first and last digits that's why I was asking how to include a part of CC infos in admin email.

Hubert

Well, this already happens to a degree, it just doesn't email the first four\last four & cvv2; that's stored in the admin section of the order. Does it 'have' to be emailed?

hubert,

That procedure is not condoned for security/privacy issues but look at DrBytes post here and you can alter this

Is it possible to set it up where the entire CC number gets stored in the admin area, so that the store manager just gets a confirmation email and then can retrieve the card details in the admin area ?

This seems much easier than matching up the first and last four digits with the email containing the middle 8 digits.

Thanks,
-Sheryl

I would recommend reading the Visa and Mastercard security policy with which you would have to comply to do this. It covers a wide range of server set-up and access requirements and even touches upon recruitment policy. Once you store whole credit card details in one place, the security requirements, and your obligations to demonstrate that you are complying with them, go through the roof.