Ok, so I have a random question that is driving me crazy trying to solve.
I'm trying to get all 12 numbers of the credit card to appear on the "view card details" portion of the "view orders" part of the store admin of ubercart.
My company has their own way of processing credit cards. So I dont need to actually send orders through a payment gateway.
I'm trying to figure out where in the ubercart module file "uc_credit.module" ("../ubercart/payment/uc_credit/uc_credit.module")
the code is to modify the output of the credit card number that displays when you click on "view card details".
Here is a picture of what/where exactly I'm talking about
Currently, the code sets only the last 4 digits of the cc number to display. What I'm trying to figure out is how to make it display all 12 digits and then also, to take away the "process card" button.
Now, before anyone thinks that I'm trying to do this for malicious reasons, I'm not. The way I've set the website up is to allow for a password protected admin to log in, view the orders and take the cc info to manually process into our counterpoint software that we do all of our normal orders through.
So... anyone have any thoughts or ideas? I'm running ragged trying to figure it out.
I'm fairly inexperienced with php, which I'm finding to be cumbersome when trying to learn drupal...
thanks in advance!
Comments
Hi foolofatook, I understand
Hi foolofatook,
I understand what you are talking about, I designed a site and the client wanted the same thing. However, with standards around credit card processing, the full numbers are stored in the database - if anyone got into your database, they'd have all your cc info which is a huge privacy concern and hence, against standards which ubercart operates within. You can read more about it here: http://www.ubercart.org/forum/development/9599/storing_credit_card_data
That said, it is possible when they submit their order for you to receive the full CC number. I can't remember how exactly it was done but I think it was under store configuration, payment settings (assuming you already have the credit card module under ubercart enabled).
Check out ubercart.org for more info.
Hope that at least gets you started,
pete
Toronto Website Developer
Hey, thanks for the info....
Hey, thanks for the info.... and to further inquire:
I'm sure it can be done, but by going to store congifuration/payment settings, there aren't any settings to change there that make it work. I do have the cc module installed too btw.
So I took a look at that UC site link you posted and after carefully reading it, I'm not sure there is actually a way to let a password protected admin view the full cc data in the "view order" page of the store's admin. Furthermore, I think that the last 4 digits that are available for viewing on the "view order" page (as well as the card type and expiry date) are only viewable in the "test_gateway" / "cc debug mode".
Correct me if I'm wrong....
So all this being said, I guess my question still remains: can I make the full 12 numbers and expiry date be viewable on the 'view order' page?
If so, is this even PCI legal?
Even further, even if it can be viewed, but isn't PCI legal, is there a way to use a custom made gateway to be able to view the cc info from there?
I know that as it stands, the php code in the "../ubercart/payment/uc_credit/uc_credit.module" file encrypts the cc data.
If this is the case, does that not mean that if there was a way to view the full 12 digits from navigating to the "view order" page (as the password-ed admin), that the viewed cc data would still be encrypted in the database?
I know its a long reply... I'm just trying to absorb as much info and learn as much as I can about it all!
Thanks again!
Im not 100% sure but I dont
Im not 100% sure but I dont think you can make it viewable in teh database and am not sure you would want to because it isn't PCI legal. I believe my work around was the email that the site sent when an order was placed, I think its possible that the email can contain the full cc number. sorry i can't remember exactly what I did, the client's site isn't up any more.
I would also suggest, with Ubercart questions, its usually more effect to post on ubercart.org - they are a lot faster in responding and have extensive experience with teh module.
pete
Toronto Website Developer
I found the solution. Heres
I found the solution. Heres the post i posted it in: http://www.ubercart.org/forum/support/17013/ubercart_view_cc_details#comment-53664
Just in case someone else finds themselves in this particular conundrum and needs help!