security of customer credit card number sent in email
 

We just got the cart set up and I notice on the invoices going out via email, the full credit card number and expiration date are shown along with all of their name/address info. 8O

Isn't this a very bad thing to be sending via email???

And... how do I remove it or at least mask everything but the last four digits (a much more common practice).

Thanks,
Scott

Yea, you are going to want to turn that off :) Go to General Settings/E-mail options and uncheck this box:

Include order details (credit card information) into admin order notification message (it is recommended to use PGP encryption with this option enabled):

thank-you
 

Thanks - I did not see that. I was worried the customers who bought since we turned online were going to see their credit card info coming back to them via email. Eek. Panic attack.

All fixed. :D

pgp
 

in order for the recipient to use pgp don't they need a pgp key also to decrupt the email?

Gene

Note to X-Cart team:

Please make this option disabled by default. It's a liability on your part to display credit card numbers in emails in stock carts...

- Mike