Can middle credit card numbers be e-mailed to 2 addresses?

I found a previous thread about this, and the suggestion was to set up a forwarding address. My concern about doing that is the same as the other person--if the e-mail didn't go through, then it couldn't be forwarded, so that wouldn't help.

I just opened up my zen store, and I didn't receive one of the e-mails with the middle CC numbers (1 out of 3 credit card orders).

In the Admin->Modules->Payment->Credit Card-Offline Processing, is there a way to put 2 e-mail addresses in like you can do in the configuration->e-mail options?

I tried, but would get an error. I just want to be sure this doesn't happen again, that I don't receive the middle digits. I called my host about it, and they don't know why it happened. I have my e-mail info set up correctly for their server.

I don't get a lot of credit card orders, so processing offline is my best option at this time.

Thanks!

The key issue is security - it's already "vulnerable" having even parts of c-card data e-mailed, so the objective is to minimise the risk.

No method of data transport is 100% reliable, so it is important that the email address you choose to use resides with a host that has a reputation for good up-time.

On the rare occasions where the e-mail may not be received, you can always telephone the customer to confirm details...

...and if you don't get the e-mail, investigate (with the host service) why this may be happening.

Can middle credit card numbers be e-mailed to 2 addresses?

The answer is no. Even if you split the card number up it will still be stored in its entirety on your machine and possibly the mail server. If a compromise occurs it would just as simple for the intruder to reassemble the card details as you can.

IridiumCorpSupport:

Can middle credit card numbers be e-mailed to 2 addresses?

The answer is no. Even if you split the card number up it will still be stored in its entirety on your machine and possibly the mail server. If a compromise occurs it would just as simple for the intruder to reassemble the card details as you can.

It can't be stored in its entirety on a mail server--the middle digits are the only ones e-mailed, so the mail server would have no way of getting the other digits and info.

I have to reassemble the info from getting part of the info from my admin area, and the rest of the info from the e-mail.

At any rate, I'm having problems getting the e-mailed info that seems to have noting to do with my e-mail server--it seems to be a zen cart issue.

schoolboy:

The key issue is security - it's already "vulnerable" having even parts of c-card data e-mailed, so the objective is to minimise the risk.

No method of data transport is 100% reliable, so it is important that the email address you choose to use resides with a host that has a reputation for good up-time.

On the rare occasions where the e-mail may not be received, you can always telephone the customer to confirm details...

...and if you don't get the e-mail, investigate (with the host service) why this may be happening.

I just found out I got another order that not only did I not get the e-mail with the middle digits, I also didn't get the order confirmation or the customer account info. I have the order & customer info going to a different e-mail address (using a different web host) than the credit card info. So it's not a mail issue. It appears to be a zen cart issue, but I have everything set up according to the instructions, and I have gotten SOME of the orders. So I'm not sure what to do.

It doesn't make the customer feel like their info is very secure if I have to call them to ask for the middle digits because they got lost.

Any ideas? At this point I'm more concerned with getting the problem fixed so I'm receiving the e-mails with all of the info rather than setting it up for 2 e-mail addresses.

So, you're really saying that you're having problems with emails getting delivered?

Troubleshooting Email: http://www.zen-cart.com/wiki/index.php/Troubleshoot_-_Email_Problems

DrByte:

So, you're really saying that you're having problems with emails getting delivered?

Troubleshooting Email: http://www.zen-cart.com/wiki/index.php/Troubleshoot_-_Email_Problems

Thanks, I had already read that. My host gave SMTP info, but their site says the operating system is Linux. So, I changed my transport method from SMTP to sendmail. That has helped, but it is still hit and miss on whether I get the order confirmations and extra CC numbers.

On a linux host, you can use any of the methods. In most cases, if they've configured their server properly, the "PHP" method is the most reliable, with sendmail being a last resort in most cases.

You can use SMTP or SMTPAUTH with pretty much any host ... you just have to specify all the SMTP settings at the bottom of the email-settings screen ... and often the mailserver host name is "localhost" ... or even mail.your_domain.com

Also in the FAQ article is a reference to the email archive manager ... which lets you see whether Zen Cart sent the emails out or not ... and (apart from CC middle-digits and password-resets ... neither of which ever get archived, for security reasons), if the email exists in the archive, then the mailserver didn't reject it ... and thus any failure to deliver is a result of problems existing "after" the mailserver grabs it. This could include blacklisting of your server's address, etc.

DrByte:

On a linux host, you can use any of the methods. In most cases, if they've configured their server properly, the "PHP" method is the most reliable, with sendmail being a last resort in most cases.

You can use SMTP or SMTPAUTH with pretty much any host ... you just have to specify all the SMTP settings at the bottom of the email-settings screen ... and often the mailserver host name is "localhost" ... or even mail.your_domain.com

Also in the FAQ article is a reference to the email archive manager ... which lets you see whether Zen Cart sent the emails out or not ... and (apart from CC middle-digits and password-resets ... neither of which ever get archived, for security reasons), if the email exists in the archive, then the mailserver didn't reject it ... and thus any failure to deliver is a result of problems existing "after" the mailserver grabs it. This could include blacklisting of your server's address, etc.

Thanks for your help. I changed it to PHP and it seems to be working better. I'll download the e-mail archive manager module so I can keep an eye on things that way. When I first had it set up as SMTP, I did have the SMTP settings filled in at the bottom. But, maybe this has fixed it. Thanks!

Now I'm not getting any e-mails generated from my shopping cart. It worked fine last night, and now nothing.

Wait, I was able to get an e-mail sent from "contact us". But I haven't gotten the order e-mails, or new customer e-mails.

DrByte:

if the email exists in the archive, then the mailserver didn't reject it ... and thus any failure to deliver is a result of problems existing "after" the mailserver grabs it. This could include blacklisting of your server's address, etc.

I just uploaded the e-mail archive module, and all of the missing e-mails are listed.

I just talked to my web hosts's tech support, and they had me change the settings again. I get a different answer from each person I speak to there. This time they told me to change it to sendmail with the SMTP e-mail mail host as localhost

I have been getting teh same problems as you. Everything was fine and dandy with recieving the cc and order emails then BAM! Nothing! Its embarrassing to say the least so always email or call the customer to leave their credit card number again. Any update on this?

Ask your host what they changed on the email server.

IFEELFROOSH:

I have been getting teh same problems as you. Everything was fine and dandy with recieving the cc and order emails then BAM! Nothing! Its embarrassing to say the least so always email or call the customer to leave their credit card number again. Any update on this?

I ended up moving my site to another host. The problem was with my host. I would get e-mails on a hit & miss basis. I don't think it is a zen cart issue. But be sure you have the e-mail settings set up correctly for your site--call your host to double check. Before I switched hosts, I just set mine up so that the middle credit card numbers would be sent to an e-mail address through my ISP and not through my host/domain.

I have a similar but different (?) issue.

I have the shopping cart set up fine so the middle of the CC gets sent to one person. They wanted a backup in case they were out.

I added a second email (comma separates them) and they aren't getting the middle portion of the CC. Is there a hard coded restriction somewhere that this split CC email field can only go to one address?

Thanks!

sjhutton:

I have a similar but different (?) issue.

I have the shopping cart set up fine so the middle of the CC gets sent to one person. They wanted a backup in case they were out.

I added a second email (comma separates them) and they aren't getting the middle portion of the CC. Is there a hard coded restriction somewhere that this split CC email field can only go to one address?

Thanks!

I tried that, and couldn't get it to work. What you can do is set up a forward on the e-mail address it's sent to. So the person who receives the middle numbers can set up a forward on the e-mail account so it is also forwarded to another address.

We went through the same thing. So what we did was set up a seperate email for this with a cryptic name [email protected]

then each person here who works on orders has a personality set up on thier email system - we use eudora -- im sure you can do it on Outlook --

once they are done with the middle #s they delete the email from thier system. We store it on a offsite server that is heavily passworded should we need to get it again.

It's a bit of hoop jumping to first get it all set up but once it is -- you dont have security issues. The big thing we were concerned about is laptops and Treos if a laptop or treo was lost and someone got it -- they could have hundreds and hundreds of cards should they get into the email thats stored on the laptop. We eliminated that.

I would also suggest that you install the pay-pal module. We found that once we added it about 22% of our customers started to use it. Just adjust your prices to take it in to consideration.

Cheers

Thanks for the responses. I put it back to one email address for now. I'll let my client know the options and see what they want to do.