Magento Forum

Order shipment email template contains full credit card number, expiration date
 
dniesen
Member
 
Total Posts:  74
Joined:  2008-04-05
 

This seems to be a bit of a security issue so I would like to modify this portion of the template.  I don’t see it in the template itself, how do I get it to only show the last 4 digits like the original order notification template?

 
Magento Community Magento Community
Magento Community
Magento Community
 
sherrie
Moderator
 
Avatar
Total Posts:  1655
Joined:  2007-12-14
Waterloo, ON
 

Was this ever resolved?

 
Magento Community Magento Community
Magento Community
Magento Community
 
dniesen
Member
 
Total Posts:  74
Joined:  2008-04-05
 

Not really, I was going to go whack at the code myself but have been busy with everything else on a store I’ve been working on.  Seems like a pretty big security oversight to me.

 
Magento Community Magento Community
Magento Community
Magento Community
 
sherrie
Moderator
 
Avatar
Total Posts:  1655
Joined:  2007-12-14
Waterloo, ON
 

Yeah, I’m pretty sure that’s not going to fly well.

 
Magento Community Magento Community
Magento Community
Magento Community
 
dell
Member
 
Avatar
Total Posts:  61
Joined:  2008-01-01
 

That’s very strange as the whole credit card number has not been emailed on the customer receipt for several versions including V1.0 Do you have V1.0 installed and is that the version that is giving you a complete credit card number on an email receipt?? 

The customer email receipt should contain only the type card, last four #’s, and the expiration date.  We have several copies of later Magento versions (including V 1.0) running, all handle credit card receipts correctly.

Good Luck,

Del

 
Magento Community Magento Community
Magento Community
Magento Community
 
Moshe
Magento Team
 
Avatar
Total Posts:  1770
Joined:  2007-08-07
Los Angeles
 

@dniesen:
1. Which Magento version do you have?
2. Which payment method do you use?

 
Magento Community Magento Community
Magento Community
Magento Community
 
swissters
Member
 
Total Posts:  31
Joined:  2008-04-23
 

I am having the same problem.  For some reason the full card number and expiration is showing on customer receipts.  I am using version 1.0 of Magento and installed it about a month ago. I am using the Credit Card (saved) payment module.  Any suggestions?

Nate

 
Magento Community Magento Community
Magento Community
Magento Community
 
BlackDesk
Member
 
Avatar
Total Posts:  35
Joined:  2008-03-10
San Diego
 

Very concerned about this issue, as we are about to launch in the coming week… answers anyone?

Thanks!

 
Magento Community Magento Community
Magento Community
Magento Community
 
eliteeternity
Member
 
Avatar
Total Posts:  74
Joined:  2008-07-16
 

Disable the “Credit Card (saved)” payment option and use google checkout or paypal.
System > Configuration > Payment Methods

 
Magento Community Magento Community
Magento Community
Magento Community
Magento Community
Magento Community
Back to top