How to Stop storage of CC number and CVV2 code

Using Authorize.net for this example

There are 2 scenarios:

1. You Auth and Capture payment at the same time.

This is a setting under the PS_Authorize. If you handle your payments this way, there is no need to store the CCV code or any more of the Credit Card number than the last 4 digits.


2. You Auth first but then Capture Payment later, like when the Status has Changed.

If this is your method of collecting payment you are going to have store these numbers in some form to complete processing. DO NOT Attempt to remove the storage of numbers as your site will not collect payment. You should be aware that Virtue Mart encrypts the CC number in the Database. However, if a hacker ever gains write access to your site files this encryption won't amount to anything. You should consider transporting the information somewhere other than a public accessible web server to complete your processing.


So if you fall into the first scenario and want to know how to stop storing this information. I have attached a How -to.

ALWAYS BACKUP YOUR FILES BEFORE MAKING ANY CHANGES> YOU SHOULD ALWAYS USE A TEST SERVER FIRST>

This How -To was made for Vmart 1.0.15 running on Joomla 1.0.15 and should only be followed for users of these versions.

Hope this helps and may stop someone from getting compromised

DOWNLOAD THIS DOCUMENT

Comments

Name *
Email (For verification & Replies)
URL
Code   

Submit Comment